vulnerability

Ubuntu: (Multiple Advisories) (CVE-2018-20189): GraphicsMagick vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Dec 17, 2018

Added

Dec 4, 2019

Modified

Apr 16, 2026

Description

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.

Solutions

ubuntu-pro-upgrade-graphicsmagickubuntu-pro-upgrade-libgraphicsmagick-q16-3ubuntu-pro-upgrade-libgraphicsmagick3ubuntu-upgrade-graphicsmagickubuntu-upgrade-libgraphicsmagick-q16-12ubuntu-upgrade-libgraphicsmagick-q16-3

References

CVE-2018-20189
https://attackerkb.com/topics/CVE-2018-20189
CWE-20
DEBIAN-DSA-4640
EUVD-EUVD-2018-12756
NVD-CVE-2018-20189
UBUNTU-USN-4207-1
UBUNTU-USN-5974-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-12756

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report