The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6586-1 advisory.

    It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked     into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow,     resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2019-12211)

    It was discovered that FreeImage incorrectly processed images under certain circumstances. If a user were     tricked into opening a crafted TIFF file, a remote attacker could possibly use this issue to cause a stack     exhaustion condition, resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS     and Ubuntu 20.04 LTS. (CVE-2019-12213)

    It was discovered that FreeImage incorrectly processed certain images. If a user or automated system were     tricked into opening a specially crafted image file, a remote attacker could possibly use this issue to     cause a denial of service or execute arbitrary code. (CVE-2020-21427, CVE-2020-21428)

    It was discovered that FreeImage incorrectly processed certain images. If a user or automated system were     tricked into opening a specially crafted PFM file, an attacker could possibly use this issue to cause a     denial of service. (CVE-2020-22524)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : FreeImage vulnerabilities (USN-6586-1)

high Nessus Plugin ID 189086

Version 1.1

Version 1.0

Version 1.1 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.0 Jan 17, 2024, 12:13 AM New Plugin Feed: 202401170013