Description
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | imlib +1 | 1:1.9.13-13.4 | RHSA-2004:651 |
Advisories 3
- RHSA-2004:651 Red Hat Security Advisory: imlib security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-628-1 imlib2 - integer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-618-1 imlib - buffer overflows, integer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDKSA-2005:007 vendor-advisory
- oval:org.mitre.oval:def:10771 vdb-entry signature
- 11830 vdb-entry
- RHSA-2004:651 vendor-advisory
- GLSA-200412-03 vendor-advisory
- DSA-628 vendor-advisory