p PatchFirst

CVE-2020-21428

CVE-2020-21428

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

CVSS 3.3 · Low · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • freeimage Debian:12

    Versions
    • 3.18.0+ds2-9
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-9+deb12u1

    Update to 3.18.0+ds2-9+deb12u1

  • freeimage Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-10

    Update to 3.18.0+ds2-10

  • freeimage Ubuntu:Pro:14.04:LTS

    Versions
    • 3.15.1-2build1
    • 3.15.1-2build2
    • 3.15.4-2
    • 3.15.4-3
    • 3.15.4-3ubuntu0.1
    • 3.15.4-3ubuntu0.1+esm1
    • 3.15.4-3ubuntu0.1+esm2
    Affected ranges
    • ECOSYSTEM: < 3.15.4-3ubuntu0.1+esm3

    Update to 3.15.4-3ubuntu0.1+esm3

  • freeimage Ubuntu:Pro:16.04:LTS

    Versions
    • 3.15.4-4.1build1
    • 3.15.4-6
    • 3.17.0+ds1-1.1
    • 3.17.0+ds1-2
    • 3.17.0+ds1-2ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 3.17.0+ds1-2ubuntu0.1+esm1

    Update to 3.17.0+ds1-2ubuntu0.1+esm1

  • freeimage Ubuntu:Pro:18.04:LTS

    Versions
    • 3.17.0+ds1-5build2
    • 3.17.0+ds1-5+deb9u1build0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

    Update to 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

  • freeimage Ubuntu:20.04:LTS

    Versions
    • 3.18.0+ds2-1ubuntu1
    • 3.18.0+ds2-1ubuntu2
    • 3.18.0+ds2-1ubuntu3
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-1ubuntu3.1

    Update to 3.18.0+ds2-1ubuntu3.1

  • freeimage Ubuntu:22.04:LTS

    Versions
    • 3.18.0+ds2-6ubuntu3
    • 3.18.0+ds2-6ubuntu4
    • 3.18.0+ds2-6ubuntu5
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-6ubuntu5.1

    Update to 3.18.0+ds2-6ubuntu5.1

  • freeimage Ubuntu:24.04:LTS

    Versions
    • 3.18.0+ds2-9.1
    • 3.18.0+ds2-10
    • 3.18.0+ds2-10build2
    • 3.18.0+ds2-10build3
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-10build4

    Update to 3.18.0+ds2-10build4

Original sources

Check your server →