GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.
    (CVE-2017-13066)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when
    processing multiple frames that have non-identical widths. (CVE-2017-11643)

  - The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a
    denial of service (application crash) during JNG reading via a zero-length color_image data structure.
    (CVE-2017-11102)

  - GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.
    (CVE-2017-11139)

  - The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a
    successful read of a scanline, which allows remote attackers to cause a denial of service (resource
    consumption) via crafted JPEG files. (CVE-2017-11140)

  - GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing
    multiple frames that have non-identical widths. (CVE-2017-11636)

This update for GraphicsMagick fixes the following issues :

  - security update (core)

  - CVE-2018-6799: The AcquireCacheNexus function in     magick/pixel_cache.c in GraphicsMagick before 1.3.28     allows remote attackers to cause a denial of service     (heap overwrite) or possibly have unspecified other     impact via a crafted image file, because a pixel staging     area is not used. [boo#1080522]

  - security update (png.c)

  - CVE-2018-9018: In GraphicsMagick 1.3.28, there is a     divide-by-zero in the ReadMNGImage function of     coders/png.c. Remote attackers could leverage this     vulnerability to cause a crash and denial of service via     a crafted mng file. [boo#1086773]

  - security update (gif.c)

  - CVE-2017-18254: An issue was discovered in ImageMagick     7.0.7. A memory leak vulnerability was found in the     function WriteGIFImage in coders/gif.c, which allow     remote attackers to cause a denial of service via a     crafted file. [boo#1087027]

  - security update (pcd.c)

  - CVE-2017-18251: An issue was discovered in ImageMagick     7.0.7. A memory leak vulnerability was found in the     function ReadPCDImage in coders/pcd.c, which allow     remote attackers to cause a denial of service via a     crafted file. [boo#1087037]

  - CVE-2017-18229: An issue was discovered in     GraphicsMagick 1.3.26. An allocation failure     vulnerability was found in the function ReadTIFFImage in     coders/tiff.c, which allows attackers to cause a denial     of service via a crafted file, because file size is not     properly used to restrict scanline, strip, and tile     allocations. [boo#1085236]

  - CVE-2017-11641: GraphicsMagick 1.3.26 has a Memory Leak     in the PersistCache function in magick/pixel_cache.c     during writing of Magick Persistent Cache (MPC)     files.[boo#1050623]

  - CVE-2017-13066: GraphicsMagick 1.3.26 has a memory leak     vulnerability in the function CloneImage in     magick/image.c. [boo#1055010]

  - CVE-2018-10177: Specially crafted PNG images may have     triggered an infinite loop [bsc#1089781]

ID	Name	Product	Family	Severity
220569	Linux Distros Unpatched Vulnerability : CVE-2017-13066	Nessus	Misc.	medium
404817	Alpine: multiple graphicsmagick packages: security update to 1.3.27-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404817	Alpine: multiple graphicsmagick packages: security update to 1.3.27-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
109521	openSUSE Security Update : GraphicsMagick (openSUSE-2018-407)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2017-13066

medium

Tenable Plugins

medium

critical

critical

critical