Nixpkgs security tracker
5.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
19 packages
- zigimports
- gimpPlugins.gimp
- gimpPlugins.gmic
- gimp-with-plugins
- gimp2Plugins.bimp
- gimp2Plugins.gimp
- gimp2Plugins.gmic
- gimp2-with-plugins
- gimp3-with-plugins
- gimp2Plugins.fourier
- gimp2Plugins.farbfeld
- gimpPlugins.lightning
- gimp2Plugins.lightning
- gimp2Plugins.lqrPlugin
- gimp2Plugins.texturize
- gimp2Plugins.gimplensfun
- gimpPlugins.resynthesizer
- gimp2Plugins.waveletSharpen
- gimp2
- @LeSuisse accepted
- @LeSuisse published on GitHub
Gimp: gimp: denial of service via integer overflow in playstation tim loader
A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an integer overflow. This occurs when multiplying num_colors and num_cluts, both 16-bit unsigned short integers, resulting in a value exceeding the maximum integer limit. An attacker could exploit this by providing a specially crafted image file, leading to undefined behavior and causing the GIMP plug-in to abort, effectively resulting in a denial of service.
References
Affected products
Matching in nixpkgs
pkgs.gimp
GNU Image Manipulation Program
Ignored packages (19)
pkgs.gimp2
GNU Image Manipulation Program
pkgs.zigimports
Automatically remove unused imports and globals from Zig files
pkgs.gimpPlugins.gimp
GNU Image Manipulation Program
pkgs.gimpPlugins.gmic
GIMP plugin for the G'MIC image processing framework
pkgs.gimp-with-plugins
GNU Image Manipulation Program with plugins
pkgs.gimp2Plugins.bimp
Batch Image Manipulation Plugin for GIMP
pkgs.gimp2Plugins.gimp
GNU Image Manipulation Program
pkgs.gimp2Plugins.gmic
GIMP plugin for the G'MIC image processing framework
pkgs.gimp2-with-plugins
GNU Image Manipulation Program with plugins
pkgs.gimp3-with-plugins
GNU Image Manipulation Program with plugins
pkgs.gimp2Plugins.fourier
GIMP plug-in to do the fourier transform
pkgs.gimp2Plugins.farbfeld
Gimp plug-in for the farbfeld image format
-
nixos-unstable 2019-08-12
- nixpkgs-unstable 2019-08-12
- nixos-unstable-small 2019-08-12
-
nixos-26.05 2019-08-12
- nixos-26.05-small 2019-08-12
- nixpkgs-26.05-darwin 2019-08-12
pkgs.gimpPlugins.lightning
None
-
nixos-unstable 0-unstable-2017-08-25
- nixpkgs-unstable 0-unstable-2017-08-25
- nixos-unstable-small 0-unstable-2017-08-25
pkgs.gimp2Plugins.lightning
None
-
nixos-unstable 0-unstable-2017-08-25
- nixpkgs-unstable 0-unstable-2017-08-25
- nixos-unstable-small 0-unstable-2017-08-25
pkgs.gimp2Plugins.lqrPlugin
None
pkgs.gimp2Plugins.texturize
None
-
nixos-unstable 2.2+unstable=2021-12-03
- nixpkgs-unstable 2.2+unstable=2021-12-03
- nixos-unstable-small 2.2+unstable=2021-12-03
-
nixos-26.05 2.2+unstable=2021-12-03
- nixos-26.05-small 2.2+unstable=2021-12-03
- nixpkgs-26.05-darwin 2.2+unstable=2021-12-03
pkgs.gimp2Plugins.gimplensfun
GIMP plugin to correct lens distortion using the lensfun library and database
-
nixos-unstable 2018-10-21
- nixpkgs-unstable 2018-10-21
- nixos-unstable-small 2018-10-21
-
nixos-26.05 2018-10-21
- nixos-26.05-small 2018-10-21
- nixpkgs-26.05-darwin 2018-10-21
pkgs.gimpPlugins.resynthesizer
Suite of gimp plugins for texture synthesis
Package maintainers
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@bddvlpr Luna Simons <luna@bddvlpr.com>