CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
geglgegl
0.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gegl
bookworm
1:0.4.42-2
fixed
bullseye
1:0.4.26-2
fixed
sid
1:0.4.50-1
fixed
squeeze
not-affected
trixie
1:0.4.48-2.5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gegl
hardy
dne
lucid
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
gegl-0_2
suse enterprise desktop 12 SP1
0.2.0-10.3.3
fixed
suse enterprise desktop 12 SP2
0.2.0-14.3
fixed
suse enterprise desktop 12 SP3
0.2.0-14.3
fixed
suse enterprise desktop 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP1
0.2.0-10.3.3
fixed
suse enterprise sap 12 SP2
0.2.0-14.3
fixed
suse enterprise sap 12 SP3
0.2.0-14.3
fixed
suse enterprise sap 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP5
0.2.0-14.3
fixed
suse enterprise server 12 SP1
0.2.0-10.3.3
fixed
suse enterprise server 12 SP2
0.2.0-14.3
fixed
suse enterprise server 12 SP3
0.2.0-14.3
fixed
suse enterprise server 12 SP4
0.2.0-14.3
fixed
suse enterprise server 12 SP5
0.2.0-14.3
fixed
suse enterprise workstation 12 SP1
0.2.0-10.3.3
fixed
suse enterprise workstation 12 SP2
0.2.0-14.3
fixed
suse enterprise workstation 12 SP3
0.2.0-14.3
fixed
suse enterprise workstation 12 SP4
0.2.0-14.3
fixed
suse enterprise workstation 12 SP5
0.2.0-14.3
fixed
gegl-0_2-lang
suse enterprise desktop 12 SP1
0.2.0-10.3.3
fixed
suse enterprise desktop 12 SP2
0.2.0-14.3
fixed
suse enterprise desktop 12 SP3
0.2.0-14.3
fixed
suse enterprise desktop 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP1
0.2.0-10.3.3
fixed
suse enterprise sap 12 SP2
0.2.0-14.3
fixed
suse enterprise sap 12 SP3
0.2.0-14.3
fixed
suse enterprise sap 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP5
0.2.0-14.3
fixed
suse enterprise server 12 SP1
0.2.0-10.3.3
fixed
suse enterprise server 12 SP2
0.2.0-14.3
fixed
suse enterprise server 12 SP3
0.2.0-14.3
fixed
suse enterprise server 12 SP4
0.2.0-14.3
fixed
suse enterprise server 12 SP5
0.2.0-14.3
fixed
suse enterprise workstation 12 SP1
0.2.0-10.3.3
fixed
suse enterprise workstation 12 SP2
0.2.0-14.3
fixed
suse enterprise workstation 12 SP3
0.2.0-14.3
fixed
suse enterprise workstation 12 SP4
0.2.0-14.3
fixed
suse enterprise workstation 12 SP5
0.2.0-14.3
fixed
gegl-0_3
suse enterprise desktop 15
0.3.34-1.30
fixed
suse enterprise desktop 15 SP1
0.3.34-1.30
fixed
suse enterprise desktop 15 SP2
0.3.34-1.30
fixed
suse enterprise desktop 15 SP3
0.3.34-1.30
fixed
suse enterprise desktop 15 SP4
0.3.34-3.3.1
fixed
suse enterprise sap 15
0.3.34-1.30
fixed
suse enterprise sap 15 SP1
0.3.34-1.30
fixed
suse enterprise sap 15 SP2
0.3.34-1.30
fixed
suse enterprise sap 15 SP3
0.3.34-1.30
fixed
suse enterprise sap 15 SP4
0.3.34-3.3.1
fixed
suse enterprise server 15
0.3.34-1.30
fixed
suse enterprise server 15 SP1
0.3.34-1.30
fixed
suse enterprise server 15 SP2
0.3.34-1.30
fixed
suse enterprise server 15 SP3
0.3.34-1.30
fixed
suse enterprise server 15 SP4
0.3.34-3.3.1
fixed
suse enterprise workstation 15
0.3.34-1.30
fixed
suse enterprise workstation 15 SP1
0.3.34-1.30
fixed
suse enterprise workstation 15 SP2
0.3.34-1.30
fixed
suse enterprise workstation 15 SP3
0.3.34-1.30
fixed
suse enterprise workstation 15 SP4
0.3.34-3.3.1
fixed
gegl-0_3-lang
suse enterprise desktop 15
0.3.34-1.30
fixed
suse enterprise desktop 15 SP1
0.3.34-1.30
fixed
suse enterprise sap 15
0.3.34-1.30
fixed
suse enterprise sap 15 SP1
0.3.34-1.30
fixed
suse enterprise server 15
0.3.34-1.30
fixed
suse enterprise server 15 SP1
0.3.34-1.30
fixed
suse enterprise workstation 15
0.3.34-1.30
fixed
suse enterprise workstation 15 SP1
0.3.34-1.30
fixed
gegl-0_4
suse enterprise desktop 15 SP2
0.4.16-1.99
fixed
suse enterprise desktop 15 SP3
0.4.16-1.99
fixed
suse enterprise desktop 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise sap 15 SP2
0.4.16-1.99
fixed
suse enterprise sap 15 SP3
0.4.16-1.99
fixed
suse enterprise sap 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise server 15 SP2
0.4.16-1.99
fixed
suse enterprise server 15 SP3
0.4.16-1.99
fixed
suse enterprise server 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise workstation 15 SP2
0.4.16-1.99
fixed
suse enterprise workstation 15 SP3
0.4.16-1.99
fixed
suse enterprise workstation 15 SP4
0.4.34-150400.1.7
fixed
gegl-0_4-lang
suse enterprise desktop 15 SP2
0.4.16-1.99
fixed
suse enterprise desktop 15 SP3
0.4.16-1.99
fixed
suse enterprise desktop 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise sap 15 SP2
0.4.16-1.99
fixed
suse enterprise sap 15 SP3
0.4.16-1.99
fixed
suse enterprise sap 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise server 15 SP2
0.4.16-1.99
fixed
suse enterprise server 15 SP3
0.4.16-1.99
fixed
suse enterprise server 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise workstation 15 SP2
0.4.16-1.99
fixed
suse enterprise workstation 15 SP3
0.4.16-1.99
fixed
suse enterprise workstation 15 SP4
0.4.34-150400.1.7
fixed
gegl-devel
suse enterprise desktop 15
0.3.34-1.30
fixed
suse enterprise desktop 15 SP1
0.3.34-1.30
fixed
suse enterprise desktop 15 SP2
0.4.16-1.99
fixed
suse enterprise desktop 15 SP3
0.4.16-1.99
fixed
suse enterprise desktop 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise sap 15
0.3.34-1.30
fixed
suse enterprise sap 15 SP1
0.3.34-1.30
fixed
suse enterprise sap 15 SP2
0.4.16-1.99
fixed
suse enterprise sap 15 SP3
0.4.16-1.99
fixed
suse enterprise sap 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise server 15
0.3.34-1.30
fixed
suse enterprise server 15 SP1
0.3.34-1.30
fixed
suse enterprise server 15 SP2
0.4.16-1.99
fixed
suse enterprise server 15 SP3
0.4.16-1.99
fixed
suse enterprise server 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise workstation 15
0.3.34-1.30
fixed
suse enterprise workstation 15 SP1
0.3.34-1.30
fixed
suse enterprise workstation 15 SP2
0.4.16-1.99
fixed
suse enterprise workstation 15 SP3
0.4.16-1.99
fixed
suse enterprise workstation 15 SP4
0.4.34-150400.1.7
fixed
libgegl-0_2-0
suse enterprise desktop 12 SP1
0.2.0-10.3.3
fixed
suse enterprise desktop 12 SP2
0.2.0-14.3
fixed
suse enterprise desktop 12 SP3
0.2.0-14.3
fixed
suse enterprise desktop 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP1
0.2.0-10.3.3
fixed
suse enterprise sap 12 SP2
0.2.0-14.3
fixed
suse enterprise sap 12 SP3
0.2.0-14.3
fixed
suse enterprise sap 12 SP4
0.2.0-14.3
fixed
suse enterprise sap 12 SP5
0.2.0-14.3
fixed
suse enterprise server 12 SP1
0.2.0-10.3.3
fixed
suse enterprise server 12 SP2
0.2.0-14.3
fixed
suse enterprise server 12 SP3
0.2.0-14.3
fixed
suse enterprise server 12 SP4
0.2.0-14.3
fixed
suse enterprise server 12 SP5
0.2.0-14.3
fixed
suse enterprise workstation 12 SP1
0.2.0-10.3.3
fixed
suse enterprise workstation 12 SP2
0.2.0-14.3
fixed
suse enterprise workstation 12 SP3
0.2.0-14.3
fixed
suse enterprise workstation 12 SP4
0.2.0-14.3
fixed
suse enterprise workstation 12 SP5
0.2.0-14.3
fixed
libgegl-0_3-0
suse enterprise desktop 15
0.3.34-1.30
fixed
suse enterprise desktop 15 SP1
0.3.34-1.30
fixed
suse enterprise desktop 15 SP2
0.3.34-1.30
fixed
suse enterprise desktop 15 SP3
0.3.34-1.30
fixed
suse enterprise desktop 15 SP4
0.3.34-3.3.1
fixed
suse enterprise sap 15
0.3.34-1.30
fixed
suse enterprise sap 15 SP1
0.3.34-1.30
fixed
suse enterprise sap 15 SP2
0.3.34-1.30
fixed
suse enterprise sap 15 SP3
0.3.34-1.30
fixed
suse enterprise sap 15 SP4
0.3.34-3.3.1
fixed
suse enterprise server 15
0.3.34-1.30
fixed
suse enterprise server 15 SP1
0.3.34-1.30
fixed
suse enterprise server 15 SP2
0.3.34-1.30
fixed
suse enterprise server 15 SP3
0.3.34-1.30
fixed
suse enterprise server 15 SP4
0.3.34-3.3.1
fixed
suse enterprise workstation 15
0.3.34-1.30
fixed
suse enterprise workstation 15 SP1
0.3.34-1.30
fixed
suse enterprise workstation 15 SP2
0.3.34-1.30
fixed
suse enterprise workstation 15 SP3
0.3.34-1.30
fixed
suse enterprise workstation 15 SP4
0.3.34-3.3.1
fixed
libgegl-0_4-0
suse enterprise desktop 15 SP2
0.4.16-1.99
fixed
suse enterprise desktop 15 SP3
0.4.16-1.99
fixed
suse enterprise desktop 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise sap 15 SP2
0.4.16-1.99
fixed
suse enterprise sap 15 SP3
0.4.16-1.99
fixed
suse enterprise sap 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise server 15 SP2
0.4.16-1.99
fixed
suse enterprise server 15 SP3
0.4.16-1.99
fixed
suse enterprise server 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise workstation 15 SP2
0.4.16-1.99
fixed
suse enterprise workstation 15 SP3
0.4.16-1.99
fixed
suse enterprise workstation 15 SP4
0.4.34-150400.1.7
fixed
typelib-1_0-Gegl-0_3
suse enterprise desktop 15
0.3.34-1.30
fixed
suse enterprise desktop 15 SP1
0.3.34-1.30
fixed
suse enterprise desktop 15 SP2
0.3.34-1.30
fixed
suse enterprise desktop 15 SP3
0.3.34-1.30
fixed
suse enterprise desktop 15 SP4
0.3.34-3.3.1
fixed
suse enterprise sap 15
0.3.34-1.30
fixed
suse enterprise sap 15 SP1
0.3.34-1.30
fixed
suse enterprise sap 15 SP2
0.3.34-1.30
fixed
suse enterprise sap 15 SP3
0.3.34-1.30
fixed
suse enterprise sap 15 SP4
0.3.34-3.3.1
fixed
suse enterprise server 15
0.3.34-1.30
fixed
suse enterprise server 15 SP1
0.3.34-1.30
fixed
suse enterprise server 15 SP2
0.3.34-1.30
fixed
suse enterprise server 15 SP3
0.3.34-1.30
fixed
suse enterprise server 15 SP4
0.3.34-3.3.1
fixed
suse enterprise workstation 15
0.3.34-1.30
fixed
suse enterprise workstation 15 SP1
0.3.34-1.30
fixed
suse enterprise workstation 15 SP2
0.3.34-1.30
fixed
suse enterprise workstation 15 SP3
0.3.34-1.30
fixed
suse enterprise workstation 15 SP4
0.3.34-3.3.1
fixed
typelib-1_0-Gegl-0_4
suse enterprise desktop 15 SP2
0.4.16-1.99
fixed
suse enterprise desktop 15 SP3
0.4.16-1.99
fixed
suse enterprise desktop 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise sap 15 SP2
0.4.16-1.99
fixed
suse enterprise sap 15 SP3
0.4.16-1.99
fixed
suse enterprise sap 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise server 15 SP2
0.4.16-1.99
fixed
suse enterprise server 15 SP3
0.4.16-1.99
fixed
suse enterprise server 15 SP4
0.4.34-150400.1.7
fixed
suse enterprise workstation 15 SP2
0.4.16-1.99
fixed
suse enterprise workstation 15 SP3
0.4.16-1.99
fixed
suse enterprise workstation 15 SP4
0.4.34-150400.1.7
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gegl
RHEL 6
0:0.1.2-4.el6_3
fixed
gegl-devel
RHEL 6
0:0.1.2-4.el6_3
fixed
Common Weakness Enumeration
References
http://git.gnome.org/browse/gegl/commit/?id=1e92e5235ded0415d555aa86066b8e4041ee5a53
http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a230
http://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html
http://rhn.redhat.com/errata/RHSA-2012-1455.html
http://secunia.com/advisories/51114
http://secunia.com/advisories/51274
http://www.mandriva.com/security/advisories?name=MDVSA-2013:081
http://www.openwall.com/lists/oss-security/2012/11/06/1
http://www.securityfocus.com/bid/56404
http://www.securitytracker.com/id?1027754
https://bugzilla.redhat.com/show_bug.cgi?id=856300
https://exchange.xforce.ibmcloud.com/vulnerabilities/79822
http://git.gnome.org/browse/gegl/commit/?id=1e92e5235ded0415d555aa86066b8e4041ee5a53
http://git.gnome.org/browse/gegl/commit/?id=4757cdf73d3675478d645a3ec8250ba02168a230
http://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html
http://rhn.redhat.com/errata/RHSA-2012-1455.html
http://secunia.com/advisories/51114
http://secunia.com/advisories/51274
http://www.mandriva.com/security/advisories?name=MDVSA-2013:081
http://www.openwall.com/lists/oss-security/2012/11/06/1
http://www.securityfocus.com/bid/56404
http://www.securitytracker.com/id?1027754
https://bugzilla.redhat.com/show_bug.cgi?id=856300
https://exchange.xforce.ibmcloud.com/vulnerabilities/79822