Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0438
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0438)
Zusammenfassung:	The remote host is missing an update for the 'cimg, gmic' package(s) announced via the MGASA-2018-0438 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'cimg, gmic' package(s) announced via the MGASA-2018-0438 advisory. Vulnerability Insight: Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h (CVE-2018-7587). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7588). An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7589). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '16 colors' case, aka case 4 (CVE-2018-7637). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '256 colors' case, aka case 8 (CVE-2018-7638). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '16 bits colors' case, aka case 16 (CVE-2018-7639). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a Monochrome case, aka case 1 (CVE-2018-7640). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '32 bits colors' case, aka case 32 (CVE-2018-7641). Affected Software/OS: 'cimg, gmic' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7587 https://github.com/xiaoqx/pocs/tree/master/cimg https://usn.ubuntu.com/4039-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-7588 https://github.com/dtschump/CImg/issues/183 https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html Common Vulnerability Exposure (CVE) ID: CVE-2018-7589 https://github.com/dtschump/CImg/issues/184 Common Vulnerability Exposure (CVE) ID: CVE-2018-7637 https://github.com/dtschump/CImg/issues/185 Common Vulnerability Exposure (CVE) ID: CVE-2018-7638 Common Vulnerability Exposure (CVE) ID: CVE-2018-7639 Common Vulnerability Exposure (CVE) ID: CVE-2018-7640 Common Vulnerability Exposure (CVE) ID: CVE-2018-7641
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.