A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Dec 11, 2017 | Aug 30, 2017 |
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Aug 30, 2017 |
| Suse | — | Upgrade perl-GraphicsMagickUpgrade perl-PerlMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore1-32bitUpgrade libMagick++-develUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand1-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore1Upgrade libMagick++1Upgrade GraphicsMagick | Dec 20, 2017 | Aug 30, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick++-q16-12Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagick | Dec 3, 2019 | Aug 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub