Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-31570
HistorySep 19, 2024 - 5:15 p.m.

CVE-2024-31570

2024-09-1917:15:12
Alpine Linux Development Team
security.alpinelinux.org
buffer overflow
libfreeimage
xpm
stack-based
unix
cve-2024-31570

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

38.4%

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchfreeimage= 3.18.0-r4UNKNOWN
Alpine3.20-communitynoarchfreeimage= 3.18.0-r4UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

38.4%