sam2p vulnerabilities and fixes

Recent CVEs affecting sam2p, with upgrade or downgrade steps. 18 tracked.

sam2p has 18 tracked vulnerabilities, 11 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-07-21. Highest priority: CVE-2018-7554 (score 70/100).

• CVE-2020-19492 HIGH 7.8 DOWNGRADE There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4
• CVE-2020-19491 HIGH 7.8 DOWNGRADE There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4
• CVE-2018-7554 CRITICAL 9.8 DOWNGRADE MITIGATE There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4
• CVE-2018-7553 CRITICAL 9.8 DOWNGRADE MITIGATE There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4
• CVE-2018-7552 CRITICAL 9.8 DOWNGRADE MITIGATE There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sa
• CVE-2018-7551 CRITICAL 9.8 DOWNGRADE MITIGATE There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4
• CVE-2018-7487 HIGH 7.8 DOWNGRADE MITIGATE There is a heap-based buffer overflow in the LoadPCX function of in_pcx.cpp in sam2p 0.49.4
• CVE-2018-12601 CRITICAL 9.8 DOWNGRADE MITIGATE There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of s
• CVE-2018-12578 CRITICAL 9.8 DOWNGRADE There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a den
• CVE-2018-11490 HIGH 8.8 UPGRADE DOWNGRADE The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c i
• CVE-2018-11489 HIGH 8.8 UPGRADE DOWNGRADE The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c i
• CVE-2017-16663 MEDIUM 5.5 DOWNGRADE In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in t
• CVE-2017-14637 CRITICAL 9.8 DOWNGRADE In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp
• CVE-2017-14636 CRITICAL 9.8 DOWNGRADE Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read
• CVE-2017-14631 CRITICAL 9.8 DOWNGRADE In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-ba
• CVE-2017-14630 CRITICAL 9.8 DOWNGRADE In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to
• CVE-2017-14629 HIGH 7.5 DOWNGRADE In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash
• CVE-2017-14628 CRITICAL 9.8 DOWNGRADE In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.

FAQ

How do I fix sam2p vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sam2p being exploited right now?

None of the tracked sam2p CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sam2p CVE should I patch first?

CVE-2018-7554 currently ranks highest (70/100): There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4.

RSS feed for sam2p · ← Back to latest CVEs