Vulnerability in sam2p - security update
Summary
DLA-1463-1: sam2p - security update. Affects sam2p versions < 0.49.2-3+deb8u3. Fixed in 0.49.2-3+deb8u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
sam2p is an open-source utility designed to convert raster images to EPS, PDF, and other formats. It is commonly used for image manipulation and conversion tasks. However, the package is susceptible to various vulnerabilities that can lead to denial of service or other unspecified impacts.
Vulnerability Detail
The vulnerability identified in sam2p is a heap-buffer-overflow issue. Two specific instances of this vulnerability have been discovered:
-
CVE-2018-12578: This vulnerability occurs in the bmp_compress1_row function and can result in a heap-buffer-overflow. It has been fixed with the help of Peter Szabo.
-
CVE-2018-12601: This vulnerability occurs in the ReadImage function in the input-tga.ci file and can also lead to a heap-buffer-overflow. Peter Szabo provided a fix for this as well.
These vulnerabilities can potentially allow attackers to execute arbitrary code or cause denial of service by crashing the application.
How To Fix
Minimum fixed version
0.49.2-3+deb8u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sam2pTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
sam2p is prone to heap-buffer-overflow vulnerabilities that can result in denial of service or arbitrary code execution. It is crucial to upgrade to the latest version (0.49.2-3+deb8u3) to mitigate these risks. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for sam2p →
FAQ
sam2p is an open-source utility used for converting raster images to EPS, PDF, and other formats.
The vulnerabilities in sam2p are heap-buffer-overflow issues that can lead to denial of service or arbitrary code execution.
To fix these vulnerabilities, you need to upgrade the sam2p package to version 0.49.2-3+deb8u3 or later.
You can obtain the updated sam2p package from the official Debian repositories or through package management tools.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to apply the official update.
Related vulnerabilities
Recent vulnerabilities recorded for sam2p.
