CVE-2024-28565

What it actually does

A buffer overflow in the psdParser::ReadImageData() function of FreeImage when processing PSD format images, allowing a local attacker to trigger a denial of service.

Why it matters to the business

Systems relying on affected iPXE packages for network booting may experience service disruptions if malicious PSD images are processed, though prevalence is limited and no active exploitation campaigns are known.

How an attack unfolds

An attacker with local access crafts a malicious PSD image file and causes the application using FreeImage to parse it, triggering the overflow in ReadImageData leading to crash.

How to fix it

Upgrade affected packages to the fixed versions: ipxe-roms (AlmaLinux:8) to 20181214-9.git133f4c47.el8 and similarly for ipxe-roms-qemu, ipxe-bootimgs-aarch64, and ipxe-bootimgs-x86.

How to confirm the fix worked

Verify package versions match the fixed releases and test image parsing functionality with various PSD files.

Typical attack path

1. Obtain local access to the system
2. Prepare a specially crafted PSD image file
3. Trigger parsing of the image via an application using FreeImage
4. Cause denial of service through buffer overflow

How to detect it

Examine system logs for crashes in processes handling PSD images or using FreeImage library; look for segmentation faults or abnormal terminations during image parsing.

What your security team should do

• Apply the specified package updates
• Review dependencies on FreeImage in custom applications
• Monitor for any unusual crashes related to image processing