CVE-2019-1010174

CRÍTICO 9.8CVE-2019-1010174 · Published 25/07/2019 · updated 17/06/2026

En resumen

CVE-2019-1010174 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a cimg library (cimg).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.0%, mayor que el 92.2% de las vulnerabilidades.
Solución: actualizar a 2.3.4 o posterior.

Package	Affected versions	Patched versions
cimg library cimg	`< 2.3.4`	`2.3.4`

Description

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed version is: v.2.3.4.

References

framagit.org/dtschump/CImg/commit/5ce7a426b77f814973e56182a0e76a2b04904146 · Patch
lists.debian.org/debian-lts-announce/2019/09/msg00030.html · Mailing List
lists.debian.org/debian-lts-announce/2020/10/msg00033.html · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free