GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Sep 20, 2017 | Aug 30, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Aug 30, 2017 |
| Suse | — | Upgrade libgraphicsmagickwand-q16-2Upgrade libgraphicsmagick-q16-12Upgrade graphicsmagick-develUpgrade libGraphicsMagick++-Q16-12-debuginfoUpgrade libgraphicsmagick-develUpgrade perl-GraphicsMagickUpgrade GraphicsMagick-debuginfoUpgrade libGraphicsMagickWand-Q16-2-debuginfoUpgrade perl-GraphicsMagick-debuginfoUpgrade GraphicsMagickUpgrade libgraphicsmagick-q16-3Upgrade GraphicsMagick-debugsourceUpgrade libgraphicsmagick3-configUpgrade libGraphicsMagick-Q16-3-debuginfo | Oct 28, 2017 | Aug 30, 2017 |
| Ubuntu | — | Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3Upgrade libgraphicsmagick++-q16-12 | Dec 17, 2019 | Aug 30, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub