PatchTheCVEimlib vulnerabilities and fixes
Recent CVEs affecting imlib, with upgrade or downgrade steps. 9 tracked.
imlib has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-07-05. Highest priority: CVE-2004-1026 (score 63/100).
- CVE-2007-3568 MEDIUM 5.0 UPGRADE The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of serv
- CVE-2004-1026 HIGH 10.0 DOWNGRADE MITIGATE Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and sev
- CVE-2004-1025 HIGH 10.0 DOWNGRADE MITIGATE Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window
- CVE-2004-0827 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow
- CVE-2004-0817 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrar
- CVE-2004-0802 MEDIUM 5.1 DOWNGRADE DOWNGRADE Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via
- CVE-2002-0168 HIGH 7.5 DOWNGRADE Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execut
- CVE-2002-0167 HIGH 7.5 DOWNGRADE Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to c
- CVE-2002-0143 MEDIUM 4.6 DOWNGRADE DOWNGRADE Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary cod
FAQ
How do I fix imlib vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is imlib being exploited right now?
None of the tracked imlib CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which imlib CVE should I patch first?
CVE-2004-1026 currently ranks highest (63/100): Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and sev.