CVE-2018-10114

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

CVE-2018-10114

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

CVE-2018-10114

Summary: CVE-2018-10114 affects GEGL up to 0.3.32. The vulnerability is in the function gegl_buffer_iterate_read_simple (buffer/gegl-buffer-access.c), where malformed PPM files and improper memory allocation restrictions in ppm_load_read_header (operations/external/ppm-load.c) can allow a remote ...

CVE-2018-10113

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10112

CVE-2018-10112 affects GEGL up to 0.3.32. The vulnerability resides in gegl_tile_backend_swap_constructed (buffer/gegl-tile-backend-swap.c), which can be triggered by a malformed PNG file and mishandling in babl_format_get_bytes_per_pixel (babl 0.1.46). Reported impact is a denial of service (wri...

CVE-2018-10112: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

CVE-2018-10113: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

CVE-2018-10111: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in GEGL through 0.3.32. The renderrectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service application crash upon allocation failure...

PT-2018-9688

Name of the Vulnerable Software and Affected Versions: GEGL versions prior to 0.3.33 Description: The issue is related to unbounded memory allocation in the process function within operations/external/ppm-load.c, which can cause a denial of service, resulting in an application crash when allocati...

PT-2018-9686

Name of the Vulnerable Software and Affected Versions: GEGL versions prior to 0.3.33 Description: An issue in the render rectangle function in process/gegl-processor.c leads to unbounded memory allocation. This results in a denial of service, causing the application to crash when memory allocatio...

PT-2018-9687

Name of the Vulnerable Software and Affected Versions: GEGL versions prior to 0.3.32 babl version 0.1.46 Description: An issue in GEGL and babl allows remote attackers to cause a denial of service or possibly have other unspecified impacts via a malformed PNG file. This occurs during a call to th...

PT-2018-9689

Name of the Vulnerable Software and Affected Versions: GEGL versions prior to 0.3.32 Description: An issue in the gegl buffer iterate read simple function allows remote attackers to cause a denial of service or possibly have other impact via a malformed PPM file. This is related to improper...

CVE-2018-10114: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions ...

[slackware-security] gegl

New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gegl-0.2.0-i586-4slack14.2.txz: Rebuilt. Patched integer overflows in operations/external/ppm-load.c that could allow a...

Slackware 14.0 / 14.1 / 14.2 / current : gegl (SSA:2017-270-01)

New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-270-01. The text itself is copyrigh...

openSUSE Security Update : gegl (openSUSE-2017-388)

This update for gegl fixes the following issues : Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0694-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0696-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2017:0694-1 Security update for gegl

This update for gegl fixes the following issues: Security issue fixed: - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835...