PT-2023-11620 · Unknown+2 · Freeimage Library+2

Freekim · Publicado 2023-08-22 · Atualizado 2024-01-16 · CVE-2020-22524

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeImage Library version 3.19.0(r1828)

Description The issue is related to a Buffer Overflow vulnerability in the FreeImage Load function, which allows attackers to cause a denial of service via a crafted PFM file.

Recommendations For FreeImage Library version 3.19.0(r1828), consider disabling the FreeImage Load function as a temporary workaround until a patch is available.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2020-22524

DLA-3662-1

DSA-5579-1

USN-6586-1

Produtos afetados

Freeimage Library

Linuxmint

Ubuntu

Referências · 23

• 🔥 https://sourceforge.net/p/freeimage/bugs/319 · Exploit
• https://cve.org/CVERecord?id=CVE-2020-22524 · Nota de Segurança
• https://t.me/cvenotify/57283 · Publicação no Telegram
• https://t.me/cvenotify/57591 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-22524 · Aviso do Fabricante
• https://t.me/cvenotify/57096 · Publicação no Telegram
• https://osv.dev/vulnerability/USN-6586-1 · Aviso do Fabricante
• https://debian.org/security/2023/dsa-5579 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-3662-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-5579-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6586-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-21428 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html · Nota