GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Sep 20, 2017 | Aug 30, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Aug 30, 2017 |
| Suse | — | Upgrade GraphicsMagick-debugsourceUpgrade GraphicsMagickUpgrade libGraphicsMagick++-Q16-12-debuginfoUpgrade libgraphicsmagick-q16-3Upgrade libGraphicsMagick-Q16-3-debuginfoUpgrade libgraphicsmagick-develUpgrade perl-GraphicsMagickUpgrade GraphicsMagick-debuginfoUpgrade perl-GraphicsMagick-debuginfoUpgrade libGraphicsMagickWand-Q16-2-debuginfoUpgrade libgraphicsmagick3-configUpgrade graphicsmagick-develUpgrade libgraphicsmagickwand-q16-2Upgrade libgraphicsmagick-q16-12 | Oct 28, 2017 | Aug 30, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick++-q16-12Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagick | Dec 17, 2019 | Aug 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub