Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6586-1 advisory.

    It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked     into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow,     resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2019-12211)

    It was discovered that FreeImage incorrectly processed images under certain circumstances. If a user were     tricked into opening a crafted TIFF file, a remote attacker could possibly use this issue to cause a stack     exhaustion condition, resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS     and Ubuntu 20.04 LTS. (CVE-2019-12213)

    It was discovered that FreeImage incorrectly processed certain images. If a user or automated system were     tricked into opening a specially crafted image file, a remote attacker could possibly use this issue to     cause a denial of service or execute arbitrary code. (CVE-2020-21427, CVE-2020-21428)

    It was discovered that FreeImage incorrectly processed certain images. If a user or automated system were     tricked into opening a specially crafted PFM file, an attacker could possibly use this issue to cause a     denial of service. (CVE-2020-22524)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5579 advisory.

  - Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows     remote attackers to run arbitrary code and cause other impacts via crafted image file. (CVE-2020-21427)

  - Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote     attackers to run arbitrary code and cause other impacts via crafted image file. (CVE-2020-21428)

  - Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows     attackers to cuase a denial of service via crafted PFM file. (CVE-2020-22524)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3662 advisory.

  - Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows     remote attackers to run arbitrary code and cause other impacts via crafted image file. (CVE-2020-21427)

  - Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote     attackers to run arbitrary code and cause other impacts via crafted image file. (CVE-2020-21428)

  - Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows     attackers to cuase a denial of service via crafted PFM file. (CVE-2020-22524)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-2840932fa8 advisory.

    Update to latest svn revision.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a8b26b910d advisory.

    Update to latest svn revision.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
189086	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : FreeImage vulnerabilities (USN-6586-1)	Nessus	Ubuntu Local Security Checks	high
187051	Debian DSA-5579-1 : freeimage - security update	Nessus	Debian Local Security Checks	high
186282	Debian DLA-3662-1 : freeimage - LTS security update	Nessus	Debian Local Security Checks	high
185300	Fedora 39 : freeimage / mingw-freeimage (2023-2840932fa8)	Nessus	Fedora Local Security Checks	high
180513	Fedora 38 : freeimage / mingw-freeimage (2023-a8b26b910d)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2020-21427

high

Tenable Plugins

high

high

high

high

high