PT-2023-11620 · Unknown+2 · Freeimage Library+2

Freekim · Published 2023-08-22 · Updated 2024-01-16 · CVE-2020-22524

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeImage Library version 3.19.0(r1828)

Description The issue is related to a Buffer Overflow vulnerability in the FreeImage Load function, which allows attackers to cause a denial of service via a crafted PFM file.

Recommendations For FreeImage Library version 3.19.0(r1828), consider disabling the FreeImage Load function as a temporary workaround until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-22524

DLA-3662-1

DSA-5579-1

USN-6586-1

Affected Products

Freeimage Library

Linuxmint

Ubuntu

References · 23

• 🔥 https://sourceforge.net/p/freeimage/bugs/319 · Exploit
• https://cve.org/CVERecord?id=CVE-2020-22524 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-22524 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6586-1 · Vendor Advisory
• https://debian.org/security/2023/dsa-5579 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3662-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5579-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6586-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-21428 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22524 · Security Note
• https://ubuntu.com/security/CVE-2019-12211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12213 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22524 · Vendor Advisory