usn-5681-1
Vulnerability from osv_ubuntu
Published
2022-10-14 14:13
Modified
2026-06-25 10:46
Summary
gThumb vulnerabilities
Details
It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-18718)
It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-20326)
It was discovered that gThumb did not properly handled certain malformed image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service. (CVE-2020-36427)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2018-18718",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-20326",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2020-36427",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "gthumb",
"binary_version": "3:3.4.3-1ubuntu0.1~esm1"
},
{
"binary_name": "gthumb-data",
"binary_version": "3:3.4.3-1ubuntu0.1~esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "gthumb",
"purl": "pkg:deb/ubuntu/gthumb@3:3.4.3-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:3.4.3-1ubuntu0.1~esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3:3.3.1.is.3.2.8-0ubuntu3",
"3:3.4.1-2",
"3:3.4.1-3",
"3:3.4.1-4",
"3:3.4.3-1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2018-18718",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-20326",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2020-36427",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "gthumb",
"binary_version": "3:3.6.1-1ubuntu0.1~esm1"
},
{
"binary_name": "gthumb-data",
"binary_version": "3:3.6.1-1ubuntu0.1~esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "gthumb",
"purl": "pkg:deb/ubuntu/gthumb@3:3.6.1-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:3.6.1-1ubuntu0.1~esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3:3.5.2-2ubuntu1",
"3:3.5.3-1",
"3:3.5.4-1",
"3:3.6.0-1",
"3:3.6.0-2",
"3:3.6.0-3",
"3:3.6.0-4",
"3:3.6.1-1"
]
}
],
"aliases": [],
"details": "It was discovered that gThumb did not properly managed\nmemory under certain circumstances. An attacker could\npossibly use this issue to cause gThumb to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n(CVE-2018-18718)\n\nIt was discovered that gThumb did not properly managed\nmemory when processing certain image files. If a user were\ntricked into opening a specially crafted JPEG file, an\nattacker could possibly use this issue to cause gThumb to\ncrash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2019-20326)\n\nIt was discovered that gThumb did not properly handled\ncertain malformed image files. If a user were tricked into\nopening a specially crafted JPEG file, an attacker could\npossibly use this issue to cause gThumb to crash, resulting\nin a denial of service. (CVE-2020-36427)\n",
"id": "USN-5681-1",
"modified": "2026-06-25T10:46:08Z",
"published": "2022-10-14T14:13:08Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-5681-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18718"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-20326"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2020-36427"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "gThumb vulnerabilities",
"upstream": [
"UBUNTU-CVE-2018-18718",
"UBUNTU-CVE-2019-20326",
"UBUNTU-CVE-2020-36427"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…