Lucene search
Ubuntu.comUB:CVE-2020-21427HistoryAug 22, 2023 - 12:00 a.m.
CVE-2020-21427
2023-08-2200:00:00
ubuntu.com
ubuntu.com
10
cve-2020-21427
buffer overflow
freeimage 3.18.0
pluginbmp.cpp
crafted image file
remote attackers
arbitrary code
unix
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
49.8%
Buffer Overflow vulnerability in function LoadPixelDataRLE8 in
PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary
code and cause other impacts via crafted image file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | freeimage | < 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1 | UNKNOWN |
| ubuntu | 20.04 | noarch | freeimage | < 3.18.0+ds2-1ubuntu3.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | freeimage | < 3.18.0+ds2-6ubuntu5.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | freeimage | < 3.18.0+ds2-9ubuntu0.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | freeimage | < 3.18.0+ds2-9.1ubuntu0.1 | UNKNOWN |
| ubuntu | 24.04 | noarch | freeimage | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | freeimage | < 3.15.4-3ubuntu0.1+esm3 | UNKNOWN |
| ubuntu | 16.04 | noarch | freeimage | < 3.17.0+ds1-2ubuntu0.1+esm1 | UNKNOWN |
Related
cvelist
cvelist
CVE-2020-21427
2023-08-22 00:00:00
nvd
nvd
CVE-2020-21427
2023-08-22 19:16:11
prion
prion
Buffer overflow
2023-08-22 19:16:00
cnvd
cnvd
FreeImage LoadPixelDataRLE8 function buffer overflow vulnerability
2023-08-25 00:00:00
cve
cve
CVE-2020-21427
2023-08-22 19:16:11
debiancve
debiancve
CVE-2020-21427
2023-08-22 19:16:11
alpinelinux
alpinelinux
CVE-2020-21427
2023-08-22 19:16:11
openvas
openvas
Debian: Security Advisory (DLA-3662-1)
2023-11-27 00:00:00
Debian: Security Advisory (DSA-5579-1)
2023-12-19 00:00:00
Fedora: Security Advisory for freeimage (FEDORA-2023-a8b26b910d)
2023-09-09 00:00:00
debian
debian
[SECURITY] [DLA 3662-1] freeimage security update
2023-11-25 21:36:10
[SECURITY] [DSA 5579-1] freeimage security update
2023-12-17 18:41:43
osv
osv
freeimage - security update
2023-12-17 00:00:00
freeimage - security update
2023-11-24 00:00:00
freeimage vulnerabilities
2024-01-16 12:44:38
nessus
nessus
Debian DLA-3662-1 : freeimage - LTS security update
2023-11-25 00:00:00
Debian DSA-5579-1 : freeimage - security update
2023-12-18 00:00:00
Fedora 38 : freeimage / mingw-freeimage (2023-a8b26b910d)
2023-09-06 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: freeimage-3.19.0-0.19.svn1909.fc39
2023-09-15 19:03:36
[SECURITY] Fedora 39 Update: mingw-freeimage-3.19.0-0.16.svn1909.fc39
2023-09-15 19:03:37
[SECURITY] Fedora 38 Update: freeimage-3.19.0-0.19.svn1909.fc38
2023-09-06 01:20:18
ubuntu
ubuntu
FreeImage vulnerabilities
2024-01-16 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
49.8%
Related for UB:CVE-2020-21427