According to the version of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gimp package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gimp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple use-after-free vulnerabilities were found in     GIMP in the channel and layer properties parsing     process when loading XCF files.An attacker could create     a specially crafted XCF file which could cause GIMP to     crash. (CVE-2016-4994)

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to     establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the     gimp_write_and_read_file function in     app/tests/test-xcf.c. This might be leveraged by     attackers to overwrite files or read file content that     was intended to be private.(CVE-2018-12713)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 到 2.10.2 為止的 GIMP 會發出 g_get_tmp_dir 呼叫以建立暫存檔名稱，這可能導致已存在的檔案名稱，app/tests/test-xcf.c 中的 gimp_write_and_read_file 函式即為一例。攻擊者可能會利用此弱點覆寫檔案或讀取預定為私密的檔案內容。 (CVE-2018-12713)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2.10.2 までの GIMP は、一時ファイル名を確立するために g_get_tmp_dir 呼び出しを行います。これにより、app/tests/test-xcf.c の gimp_write_and_read_file 関数が示すように、ファイル名がすでに存在する可能性があります。攻撃者がこれを利用して、ファイルを上書きしたり、プライベートにする予定のファイルコンテンツを読み取ったりする可能性があります。 （CVE-2018-12713）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a     filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-     xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to     be private. (CVE-2018-12713)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - GIMP 到 2.10.2 进行 g_get_tmp_dir 调用以建立临时文件名，这可能导致生成已存在的文件名，这一点已由 app/tests/test-xcf.c 中的 gimp_write_and_read_file 函数证实。攻击者可能利用此问题覆盖文件或读取本应保密的文件内容。 (CVE-2018-12713)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126417	EulerOS 2.0 SP5 : gimp (EulerOS-SA-2019-1675)	Nessus	Huawei Local Security Checks	2019/7/2	2024/5/13	critical
126868	EulerOS 2.0 SP2 : gimp (EulerOS-SA-2019-1741)	Nessus	Huawei Local Security Checks	2019/7/22	2024/5/9	critical
126998	EulerOS 2.0 SP8 : gimp (EulerOS-SA-2019-1761)	Nessus	Huawei Local Security Checks	2019/7/25	2024/5/8	critical
129214	EulerOS 2.0 SP3 : gimp (EulerOS-SA-2019-2021)	Nessus	Huawei Local Security Checks	2019/9/24	2022/5/19	critical
221998	Linux Distros 未修補弱點：CVE-2018-12713	Nessus	Misc.	2025/3/4	2025/9/3	critical
221998	Linux Distros のパッチ未適用の脆弱性: CVE-2018-12713	Nessus	Misc.	2025/3/4	2025/9/3	critical
221998	Linux Distros Unpatched Vulnerability : CVE-2018-12713	Nessus	Misc.	2025/3/4	2025/9/3	critical
221998	Linux Distros 未修补的漏洞: CVE-2018-12713	Nessus	Misc.	2025/3/4	2025/9/3	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical