[From nobody Sun Oct 18 10:03:06 2026 Received: (at submit) by bugs.debian.org; 12 Jan 2024 22:08:14 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02 (2021-04-09) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-3.9 required=4.0 tests=BAYES_00,RCVD_IN_DNSWL_MED, SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 42; hammy, 150; neutral, 50; spammy, 0. spammytokens: hammytokens:0.000-+--H*RU:inutil.org, 0.000-+--H*r:jmm, 0.000-+--UD:security-tracker.debian.org, 0.000-+--security-tracker.debian.org, 0.000-+--securitytrackerdebianorg Return-path: <jmm@inutil.org> Received: from inutil.org ([109.69.64.57]:40892 helo=viruvalge.hosting.plutex.de) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.94.2) (envelope-from <jmm@inutil.org>) id 1rOPhE-008p6W-6f for submit@bugs.debian.org; Fri, 12 Jan 2024 22:08:14 +0000 Received: by viruvalge.hosting.plutex.de (Postfix, from userid 112) id D57C9402C1; Fri, 12 Jan 2024 23:08:07 +0100 (CET) Received: from hullmann.fritz.box (ip5f597095.dynamic.kabel-deutschland.de [95.89.112.149]) by viruvalge.hosting.plutex.de (Postfix) with ESMTPSA id 6327640143 for <submit@bugs.debian.org>; Fri, 12 Jan 2024 23:08:07 +0100 (CET) Received: from jmm by hullmann.fritz.box with local (Exim 4.96) (envelope-from <jmm@hullmann.westfalen.local>) id 1rOPh8-0000hE-3C for submit@bugs.debian.org; Fri, 12 Jan 2024 23:08:07 +0100 Date: Fri, 12 Jan 2024 23:08:06 +0100 To: submit@bugs.debian.org Subject: freeimage: CVE-2023-47992 CVE-2023-47993 CVE-2023-47994 CVE-2023-47996 CVE-2023-47997 Message-ID: <ZaG4RquRf4Ip9Iuv@pisco.westfalen.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline From: =?UTF-8?Q?Moritz_M=C3=BChlenhoff?= <jmm@inutil.org> Delivered-To: submit@bugs.debian.org Source: freeimage X-Debbugs-CC: team@security.debian.org Severity: important Tags: security Hi, The following vulnerabilities were published for freeimage. These don't appear to have been reported upstream, could you check with the upstream developers? CVE-2023-47992[0]: | An integer overflow vulnerability in | FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows | attackers to obtain sensitive information, cause a denial-of-service | attacks and/or run arbitrary code. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47992 CVE-2023-47993[1]: | A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in | FreeImage 3.18.0 allows attackers to cause a denial-of-service. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47993 CVE-2023-47994[2]: | An integer overflow vulnerability in LoadPixelDataRLE4 function in | PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain | sensitive information, cause a denial of service and/or run | arbitrary code. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47994 CVE-2023-47996[4]: | An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in | FreeImage 3.18.0 allows attackers to obtain information and cause a | denial of service. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47996 CVE-2023-47997[5]: | An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in | FreeImage 3.18.0 leads to an infinite loop and allows attackers to | cause a denial of service. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2023-47992 https://www.cve.org/CVERecord?id=CVE-2023-47992 [1] https://security-tracker.debian.org/tracker/CVE-2023-47993 https://www.cve.org/CVERecord?id=CVE-2023-47993 [2] https://security-tracker.debian.org/tracker/CVE-2023-47994 https://www.cve.org/CVERecord?id=CVE-2023-47994 [3] https://security-tracker.debian.org/tracker/CVE-2023-47995 https://www.cve.org/CVERecord?id=CVE-2023-47995 [4] https://security-tracker.debian.org/tracker/CVE-2023-47996 https://www.cve.org/CVERecord?id=CVE-2023-47996 [5] https://security-tracker.debian.org/tracker/CVE-2023-47997 https://www.cve.org/CVERecord?id=CVE-2023-47997 Please adjust the affected versions in the BTS as needed. ]