vulnerability

Ubuntu: USN-4266-1 (CVE-2017-18229): GraphicsMagick vulnerabilities

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Mar 13, 2018
Added
Feb 6, 2020
Modified
Mar 22, 2023

Description

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations.

Solution(s)

ubuntu-upgrade-graphicsmagickubuntu-upgrade-libgraphicsmagick-q16-12ubuntu-upgrade-libgraphicsmagick-q16-3
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.