GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c     (CVE-2017-17789)

  - gimp: predictable temporary file name in test-xcf.c unit test (CVE-2018-12713)

  - In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the     gbr import parser, related to mishandling of UTF-8 data. (CVE-2017-17784)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gimp: predictable temporary file name in test-xcf.c unit test (CVE-2018-12713)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple use-after-free vulnerabilities were found in     GIMP in the channel and layer properties parsing     process when loading XCF files.An attacker could create     a specially crafted XCF file which could cause GIMP to     crash. (CVE-2016-4994)

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198429	RHEL 7 : gimp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198397	RHEL 8 : gimp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
195493	RHEL 7 : gimp (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
195483	RHEL 8 : gimp (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
129214	EulerOS 2.0 SP3 : gimp (EulerOS-SA-2019-2021)	Nessus	Huawei Local Security Checks	critical
126998	EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)	Nessus	Huawei Local Security Checks	critical
126868	EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-1741)	Nessus	Huawei Local Security Checks	critical
126417	EulerOS 2.0 SP5 : gimp (EulerOS-SA-2019-1675)	Nessus	Huawei Local Security Checks	critical

Detections

Analytics

CVE-2018-12713

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical