GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Sep 20, 2017 | Aug 30, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Aug 30, 2017 |
| Suse | — | Upgrade libgraphicsmagick3-configUpgrade libGraphicsMagick++-Q16-12-debuginfoUpgrade libGraphicsMagick-Q16-3-debuginfoUpgrade perl-GraphicsMagick-debuginfoUpgrade libgraphicsmagick-develUpgrade libGraphicsMagickWand-Q16-2-debuginfoUpgrade perl-GraphicsMagickUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagickUpgrade libgraphicsmagick-q16-3Upgrade GraphicsMagick-debuginfoUpgrade graphicsmagick-develUpgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagickwand-q16-2 | Oct 28, 2017 | Aug 30, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick++-q16-12Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3 | Dec 17, 2019 | Aug 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub