Is CVE-2023-44444 in the CISA KEV catalog?

No. CVE-2023-44444 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-44444?

CVE-2023-44444 has a CVSS v3 base score of 7.8 (HIGH).

What is the EPSS score for CVE-2023-44444?

CVE-2023-44444 has an EPSS score of 56.40% (99th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-44444?

Upgrade gimp on debian 11 to 2.10.22-4+deb11u1 or later. Fixes are available for 53 affected products.

CVE & CISA-KEV Catalog

CVE-2023-44444

HIGHEPSS 99th pctl

7.8

CVSS v3

NVD

Description

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

CWE-193

How to fix

Remediation Available

gimpDebian

Fixed in:2.10.22-4+deb11u1CVE-2023-44444

Fixed in:2.10.34-1+deb12u1CVE-2023-44444

Fixed in:2.10.36-1CVE-2023-44444

gimpRed Hat / RHEL

Fixed in:2:2.8.22-1.el7_9.1RHSA-2024:10666

Fixed in:2:2.8.22-1.el7_9.1.ppc64RHSA-2024:10666

Fixed in:2:2.8.22-1.el7_9.1RHSA-2024:10666

Fixed in:2:2.8.22-25.module+el8.9.0+21239+e25d5ab1.src::gimp:2.8RHSA-2024:0861

Fixed in:2:2.8.22-25.module+el8.9.0+21239+e25d5ab1.aarch64::gimp:2.8RHSA-2024:0861

Fixed in:2:2.8.22-25.module+el8.9.0+21239+e25d5ab1.ppc64le::gimp:2.8RHSA-2024:0861

Fixed in:2:2.8.22-16.module+el8.4.0+21284+53f03f2b.ppc64le::gimp:2.8RHSA-2024:1007

Fixed in:2:2.8.22-25.module+el8.9.0+21239+e25d5ab1.s390x::gimp:2.8RHSA-2024:0861

Fixed in:2:2.8.22-18.module+el8.6.0+21241+b15d72f3.aarch64::gimp:2.8RHSA-2024:0863

Fixed in:2:2.8.22-25.module+el8.9.0+21239+e25d5ab1.x86_64::gimp:2.8RHSA-2024:0861

Fixed in:2:2.8.22-16.module+el8.4.0+21284+53f03f2b.x86_64::gimp:2.8RHSA-2024:1007

Fixed in:2:2.8.22-18.module+el8.6.0+21241+b15d72f3.src::gimp:2.8RHSA-2024:0863

Fixed in:2:2.8.22-16.module+el8.4.0+21284+53f03f2b.src::gimp:2.8RHSA-2024:1007

Fixed in:2:2.8.22-26.module+el8.10.0+22678+3f0023d6.x86_64::gimp:2.8RHSA-2025:0746

Fixed in:2:2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1.ppc64le::gimp:2.8RHSA-2024:1327

Fixed in:2:2.8.22-25.module+el8.8.0+21240+7db4aa5a.src::gimp:2.8RHSA-2024:0862

Fixed in:2:2.8.22-25.module+el8.8.0+21240+7db4aa5a.aarch64::gimp:2.8RHSA-2024:0862

Fixed in:2:2.8.22-25.module+el8.8.0+21240+7db4aa5a.ppc64le::gimp:2.8RHSA-2024:0862

Fixed in:2:2.8.22-25.module+el8.8.0+21240+7db4aa5a.s390x::gimp:2.8RHSA-2024:0862

Fixed in:2:2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1.x86_64::gimp:2.8RHSA-2024:1327

Fixed in:2:2.8.22-26.module+el8.10.0+22678+3f0023d6.src::gimp:2.8RHSA-2025:0746

Fixed in:2:2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1.src::gimp:2.8RHSA-2024:1327

Fixed in:2:2.8.22-25.module+el8.8.0+21240+7db4aa5a.x86_64::gimp:2.8RHSA-2024:0862

Fixed in:2:2.8.22-26.module+el8.10.0+22678+3f0023d6.aarch64::gimp:2.8RHSA-2025:0746

Fixed in:2:2.8.22-26.module+el8.10.0+22678+3f0023d6.s390x::gimp:2.8RHSA-2025:0746

Fixed in:2:2.8.22-26.module+el8.10.0+22678+3f0023d6.ppc64le::gimp:2.8RHSA-2025:0746

Fixed in:2:2.8.22-18.module+el8.6.0+21241+b15d72f3.x86_64::gimp:2.8RHSA-2024:0863

Fixed in:2:2.8.22-18.module+el8.6.0+21241+b15d72f3.s390x::gimp:2.8RHSA-2024:0863

Fixed in:2:2.8.22-18.module+el8.6.0+21241+b15d72f3.ppc64le::gimp:2.8RHSA-2024:0863

Fixed in:2:2.99.8-3.el9_0RHSA-2024:0716

Fixed in:2:2.99.8-4.el9_3RHSA-2024:0675

Fixed in:2:2.99.8-3.el9_0RHSA-2024:0716

Fixed in:2:2.99.8-4.el9_3RHSA-2024:0675

Fixed in:2:2.99.8-4.el9_6RHSA-2025:7417

Fixed in:2:2.99.8-4.el9_2RHSA-2024:0702

Fixed in:2:2.99.8-4.el9_5RHSA-2025:3617

Fixed in:2:2.99.8-3.el9_0RHSA-2024:0716

Fixed in:2:2.99.8-4.el9_5RHSA-2025:3617

Fixed in:2:2.99.8-4.el9_4RHSA-2025:3629

gimpRocky