GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Dec 11, 2017 | Oct 3, 2017 |
| Debian | — | Upgrade graphicsmagick | Oct 18, 2018 | Oct 3, 2017 |
| Suse | — | Upgrade libMagick++1Upgrade libMagickWand1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-develUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1-32bitUpgrade libMagickCore1Upgrade libMagickWand1-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade ImageMagick-config-6-SUSEUpgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagickWand-6_Q16-1Upgrade GraphicsMagickUpgrade perl-PerlMagick | Oct 26, 2018 | Oct 3, 2017 |
| Ubuntu | — | Upgrade libgraphicsmagick-q16-3Upgrade graphicsmagickUpgrade libgraphicsmagick++-q16-12 | Jan 9, 2020 | Oct 3, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub