An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gimpalma-upgrade-gimp-libs | Nov 21, 2022 | Jun 24, 2022 | |
| Centos_linux | — | centos-upgrade-gimpcentos-upgrade-gimp-debuginfocentos-upgrade-gimp-debugsourcecentos-upgrade-gimp-devel-tools-debuginfocentos-upgrade-gimp-libscentos-upgrade-gimp-libs-debuginfo | Nov 16, 2022 | Jun 24, 2022 |
| Debian | debian-upgrade-gimp | Jul 30, 2024 | Jun 24, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-media-gfx-gimp | Jan 20, 2025 | Jun 24, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gimphuawei-euleros-2_0_sp5-upgrade-gimp-libs | Oct 11, 2022 | Jun 24, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-gimporacle-linux-upgrade-gimp-libs | Nov 22, 2022 | Jun 3, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-gimpredhat-upgrade-gimp-debuginforedhat-upgrade-gimp-debugsourceredhat-upgrade-gimp-devel-tools-debuginforedhat-upgrade-gimp-libsredhat-upgrade-gimp-libs-debuginfo | Nov 16, 2022 | Jun 24, 2022 | |
| Rocky_linux | rocky-upgrade-gimprocky-upgrade-gimp-debuginforocky-upgrade-gimp-debugsourcerocky-upgrade-gimp-libsrocky-upgrade-gimp-libs-debuginfo | Mar 12, 2024 | Jun 24, 2022 | |
| Suse | — | suse-upgrade-gimpsuse-upgrade-gimp-develsuse-upgrade-gimp-langsuse-upgrade-gimp-plugin-aasuse-upgrade-gimp-plugins-pythonsuse-upgrade-libgimp-2_0-0suse-upgrade-libgimp-2_0-0-32bitsuse-upgrade-libgimpui-2_0-0suse-upgrade-libgimpui-2_0-0-32bit | Oct 26, 2022 | Jun 24, 2022 |
| Ubuntu | ubuntu-upgrade-gimp | Nov 30, 2023 | Jun 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub