vulnerability

SUSE: CVE-2019-11007: SUSE Linux Security Advisory

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:P)
Published
2019-04-08
Added
2019-04-26
Modified
2021-10-22

Description

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap.

Solution(s)

suse-upgrade-graphicsmagicksuse-upgrade-graphicsmagick-develsuse-upgrade-imagemagicksuse-upgrade-imagemagick-config-6-susesuse-upgrade-imagemagick-config-6-upstreamsuse-upgrade-imagemagick-config-7-susesuse-upgrade-imagemagick-config-7-upstreamsuse-upgrade-imagemagick-develsuse-upgrade-imagemagick-devel-32bitsuse-upgrade-imagemagick-docsuse-upgrade-imagemagick-extrasuse-upgrade-libgraphicsmagick-develsuse-upgrade-libgraphicsmagick-q16-12suse-upgrade-libgraphicsmagick-q16-3suse-upgrade-libgraphicsmagick3-configsuse-upgrade-libgraphicsmagickwand-q16-2suse-upgrade-libmagick-6_q16-3suse-upgrade-libmagick-7_q16hdri4suse-upgrade-libmagick-7_q16hdri4-32bitsuse-upgrade-libmagick-develsuse-upgrade-libmagick-devel-32bitsuse-upgrade-libmagickcore-6_q16-1suse-upgrade-libmagickcore-6_q16-1-32bitsuse-upgrade-libmagickcore-7_q16hdri6suse-upgrade-libmagickcore-7_q16hdri6-32bitsuse-upgrade-libmagickwand-6_q16-1suse-upgrade-libmagickwand-7_q16hdri6suse-upgrade-libmagickwand-7_q16hdri6-32bitsuse-upgrade-perl-graphicsmagicksuse-upgrade-perl-perlmagick
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.