ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2018.0438
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2018-0438)
Resumen:	The remote host is missing an update for the 'cimg, gmic' package(s) announced via the MGASA-2018-0438 advisory.
Descripción:	Summary: The remote host is missing an update for the 'cimg, gmic' package(s) announced via the MGASA-2018-0438 advisory. Vulnerability Insight: Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h (CVE-2018-7587). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7588). An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7589). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '16 colors' case, aka case 4 (CVE-2018-7637). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '256 colors' case, aka case 8 (CVE-2018-7638). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '16 bits colors' case, aka case 16 (CVE-2018-7639). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a Monochrome case, aka case 1 (CVE-2018-7640). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a '32 bits colors' case, aka case 32 (CVE-2018-7641). Affected Software/OS: 'cimg, gmic' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7587 https://github.com/xiaoqx/pocs/tree/master/cimg https://usn.ubuntu.com/4039-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-7588 https://github.com/dtschump/CImg/issues/183 https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html Common Vulnerability Exposure (CVE) ID: CVE-2018-7589 https://github.com/dtschump/CImg/issues/184 Common Vulnerability Exposure (CVE) ID: CVE-2018-7637 https://github.com/dtschump/CImg/issues/185 Common Vulnerability Exposure (CVE) ID: CVE-2018-7638 Common Vulnerability Exposure (CVE) ID: CVE-2018-7639 Common Vulnerability Exposure (CVE) ID: CVE-2018-7640 Common Vulnerability Exposure (CVE) ID: CVE-2018-7641
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.