p PatchFirst

CVE-2018-7587

CVE-2018-7587

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h.

CVSS 7.8 · High · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cimg Debian:12

    Versions
    • 3.2.1+dfsg-1
    • 3.2.1+dfsg-2
    • 3.5.0+dfsg-1
    • 3.5.2+dfsg-1
    • 3.5.2+dfsg-2
    • 4.0.4+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cimg Debian:13

    Versions
    • 3.5.2+dfsg-1
    • 3.5.2+dfsg-1+deb13u1
    • 3.5.2+dfsg-2
    • 4.0.4+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cimg Debian:14

    Versions
    • 3.5.2+dfsg-1
    • 3.5.2+dfsg-2
    • 4.0.4+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cimg Ubuntu:16.04:LTS

    Versions
    • 1.6.4+dfsg-1build1
    • 1.6.5+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cimg Ubuntu:18.04:LTS

    Versions
    • 1.7.9+dfsg-2
    • 1.7.9+dfsg-2build1
    Affected ranges
    • ECOSYSTEM: < 1.7.9+dfsg-2ubuntu0.18.04.1

    Update to 1.7.9+dfsg-2ubuntu0.18.04.1

Original sources

Check your server →