There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp
    file, but a memcpy occurs in which the destination address and the size of the copied data are not
    considered, resulting in a heap overflow. (CVE-2019-12211)

  - When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly
    calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can
    achieve a remote denial of service attack by sending a specially constructed file. (CVE-2019-12212)

  - When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always
    returns 1, leading to stack exhaustion. (CVE-2019-12213)

  - In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3
    function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that
    l_N_ppm may be greater than the size of p_header_data. (CVE-2019-12214)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - FreeImage 中 3.18.0会发生越界访问错误原因是未正确处理 j2k.c 中的 OpenJPEG j2k_read_ppm_v3 函数。l_N_ppm 的值来自读入的文件并且代码未考虑 l_N_ppm 可能大于 p_header_data 的大小。 (CVE-2019-12214)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 FreeImage 3.18.0中發生超出邊界存取這是因為不當處理 j2k.c 中的 OpenJPEG j2k_read_ppm_v3 函式所致。l_N_ppm 的值來自讀入的檔案且程式碼不會考慮 l_N_ppm 可能大於 p_header_data 的大小。 (CVE-2019-12214)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - FreeImage 3.18.0では、j2k.c の OpenJPEG j2k_read_ppm_v3 関数の処理が不適切なために、領域外アクセスが発生します。l_N_ppm の値は のファイル読み込みから取得され、コードは l_N_ppm が p_header_data のサイズより大きい可能性を考慮しません。CVE-2019-12214

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3     function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that     l_N_ppm may be greater than the size of p_header_data. (CVE-2019-12214)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
400480	Alpine: "FreeImage": security update to 3.18.0-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
400480	Alpine: "FreeImage": security update to 3.18.0-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
251104	Linux Distros 未修补的漏洞：CVE-2019-12214	Nessus	Misc.	2025/8/18	2026/6/27	high
251104	Linux Distros 未修補的弱點：CVE-2019-12214	Nessus	Misc.	2025/8/18	2026/6/27	high
251104	Linux Distros のパッチ未適用の脆弱性: CVE-2019-12214	Nessus	Misc.	2025/8/18	2026/6/27	high
251104	Linux Distros Unpatched Vulnerability : CVE-2019-12214	Nessus	Misc.	2025/8/18	2026/6/27	high

检测

插件搜索

high

high

high

high

high

high