Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/gimp@2.8.22-r2?arch=aarch64&distroversion=v3.23&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | gimp |
| Version | 2.8.22-r2 |
| Qualifiers |
| arch |
aarch64 |
| distroversion |
v3.23 |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 2.10.36-r0 |
| Latest_non_vulnerable_version | 2.10.36-r0 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-2gnq-1cax-h3ag |
| vulnerability_id |
VCID-2gnq-1cax-h3ag |
| summary |
In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17785 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00351 |
| scoring_system |
epss |
| scoring_elements |
0.57771 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00351 |
| scoring_system |
epss |
| scoring_elements |
0.57806 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00351 |
| scoring_system |
epss |
| scoring_elements |
0.57831 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00351 |
| scoring_system |
epss |
| scoring_elements |
0.5782 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00351 |
| scoring_system |
epss |
| scoring_elements |
0.57823 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17785 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17785
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2gnq-1cax-h3ag |
|
| 1 |
| url |
VCID-5s2u-kc9w-t3hk |
| vulnerability_id |
VCID-5s2u-kc9w-t3hk |
| summary |
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17787 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43025 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43061 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43086 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43051 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43099 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43107 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17787 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17787
|
| risk_score |
3.2 |
| exploitability |
0.5 |
| weighted_severity |
6.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5s2u-kc9w-t3hk |
|
| 2 |
| url |
VCID-cacx-s3gr-8kdg |
| vulnerability_id |
VCID-cacx-s3gr-8kdg |
| summary |
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17788 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65354 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65416 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65404 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65395 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65405 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00479 |
| scoring_system |
epss |
| scoring_elements |
0.65415 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17788 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17788
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
5.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cacx-s3gr-8kdg |
|
| 3 |
| url |
VCID-exuk-kv31-mkh9 |
| vulnerability_id |
VCID-exuk-kv31-mkh9 |
| summary |
In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17784 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55853 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55907 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55902 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55885 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55909 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00326 |
| scoring_system |
epss |
| scoring_elements |
0.55915 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17784 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17784
|
| risk_score |
3.2 |
| exploitability |
0.5 |
| weighted_severity |
6.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-exuk-kv31-mkh9 |
|
| 4 |
| url |
VCID-ezfa-3tpq-fkas |
| vulnerability_id |
VCID-ezfa-3tpq-fkas |
| summary |
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17786 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54657 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54717 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54718 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54697 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54714 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00312 |
| scoring_system |
epss |
| scoring_elements |
0.54725 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17786 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17786
|
| risk_score |
3.2 |
| exploitability |
0.5 |
| weighted_severity |
6.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ezfa-3tpq-fkas |
|
| 5 |
| url |
VCID-j4cz-3fv9-rufp |
| vulnerability_id |
VCID-j4cz-3fv9-rufp |
| summary |
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17789 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63784 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63832 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63825 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63812 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63826 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00446 |
| scoring_system |
epss |
| scoring_elements |
0.63833 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-17789 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-17789
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j4cz-3fv9-rufp |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/gimp@2.8.22-r2%3Farch=aarch64&distroversion=v3.23&reponame=community |