CVE-2017-17785: Buffer Overflow
In GIMP 2.8.22, there is a heap-based buffer overflow in the flireadbrun function in plug-ins/file-fli/fli.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 2.10.22-4+deb11u2Fixed in 2.10.22-4+deb11u6Fixed in 2.10.34-1+deb12u5Fixed in 2.10.34-1+deb12u8Fixed in 3.0.4-3+deb13u2Fixed in 3.0.4-3+deb13u6Fixed in 3.2.0~RC2-3.1Fixed in 3.2.0~RC2-3.3 - Upgrade
Upgrade
alpine/gimpto a version that resolves this vulnerability.Fixed in 2.8.22-r2
Event History
Frequently Asked Questions
What is CVE-2017-17785?
CVE-2017-17785 is a vulnerability in GIMP 2.8.22 that allows for a heap-based buffer overflow in the fli_read_brun function.
How severe is CVE-2017-17785?
CVE-2017-17785 has a severity rating of 7.8 (High).
Which software versions are affected by CVE-2017-17785?
CVE-2017-17785 affects GIMP 2.8.22.
How can I fix CVE-2017-17785?
To fix CVE-2017-17785, you should update GIMP to version 2.10.8-2, 2.10.22-4, or 2.10.34-1.
Where can I find more information about CVE-2017-17785?
You can find more information about CVE-2017-17785 at the following references: [Openwall](http://www.openwall.com/lists/oss-security/2017/12/19/5), [GNOME Bugzilla](https://bugzilla.gnome.org/show_bug.cgi?id=739133), [Debian LTS Announce](https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html).