UBUNTU-CVE-2017-17786

Details

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.

Affected Packages

gimp

Ubuntu 14.04 LTS

Affected versions:

2.8.10-0ubuntu12.8.10-0ubuntu1.12.8.6-1ubuntu12.8.6-1ubuntu22.8.6-1ubuntu3

Fixed in:

2.8.10-0ubuntu1.2

gimp

Ubuntu Pro 16.04 LTSUbuntu 16.04 LTS

Affected versions:

2.8.14-1.2ubuntu12.8.14-1ubuntu22.8.16-1ubuntu12.8.16-1ubuntu1.1

gimp

Ubuntu 18.04 LTS

Affected versions:

2.8.20-12.8.20-1.12.8.20-2

Fixed in:

2.8.22-1

References

REPORT

http://www.openwall.com/lists/oss-security/2017/12/19/5

REPORT

https://bugzilla.gnome.org/show_bug.cgi?id=739134

REPORT

https://git.gnome.org/browse/gimp/commit/?h=gimp-2-8&id=22e2571c25425f225abdb11a566cc281fca6f366

REPORT

https://git.gnome.org/browse/gimp/commit/?h=gimp-2-8&id=ef9c821fff8b637a2178eab1c78cae6764c50e12

REPORT

https://git.gnome.org/browse/gimp/commit/?id=674b62ad45b6579ec6d7923dc3cb1ef4e8b5498b

REPORT

https://git.gnome.org/browse/gimp/commit/?id=8ea316667c8a3296bce2832b3986b58d0fdfc077

REPORT

https://ubuntu.com/security/CVE-2017-17786

REPORT

https://ubuntu.com/security/notices/USN-3539-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2017-17786