In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary
    files via a crafted image because of TranslateTextEx for SVG. (CVE-2019-12921)

  - There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the
    function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. (CVE-2018-18544)

  - In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash
    and denial of service via a dib file that is crafted to appear with direct pixel values and also
    colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.
    (CVE-2018-20189)

  - In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in
    WritePDFImage in coders/pdf.c. (CVE-2019-7397)

  - coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read
    and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and
    CVE-2019-11009. (CVE-2019-11473)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory.

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted TGA image file, an attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-20184)

    It was discovered that GraphicsMagick was not properly validating bits per pixel data when processing DIB     image files. If a user or automated system were tricked into processing a specially crafted DIB image     file, an attacker could possibly use this issue to cause a denial of service. This issue only affected     Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-20189)

    It was discovered that GraphicsMagick was not properly processing bit-field mask values in BMP image     files, which could result in the execution of an infinite loop. If a user or automated system were tricked     into processing a specially crafted BMP image file, an attacker could possibly use this issue to cause a     denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-5685)

    It was discovered that GraphicsMagick was not properly validating data used in arithmetic operations when     processing MNG image files, which could result in a divide-by-zero error. If a user or automated system     were tricked into processing a specially crafted MNG image file, an attacker could possibly use this issue     to cause a denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-9018)

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing MIFF image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 ESM and Ubuntu     16.04 ESM. (CVE-2019-11006)

    It was discovered that GraphicsMagick did not properly magnify certain MNG image files, which could lead     to a heap buffer overflow. If a user or automated system were tricked into processing a specially crafted     MNG image file, an attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-12672)

    It was discovered that GraphicsMagick was not properly performing bounds checks when parsing certain MIFF     image files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or execute arbitrary code. (CVE-2022-1270)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4207-1 advisory.

    It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for GraphicsMagick fixes the following issues :

Security vulnerabilities fixed :

  - CVE-2018-20184: Fixed heap-based buffer overflow in the     WriteTGAImage function of tga.c (bsc#1119822)

  - CVE-2018-20189: Fixed denial of service vulnerability in     ReadDIBImage function of coders/dib.c (bsc#1119790)

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2018-20184: Fixed heap-based buffer overflow in the     WriteTGAImage function of tga.c (bsc#1119822)

  - CVE-2018-20189: Fixed denial of service vulnerability in     ReadDIBImage function of coders/dib.c (bsc#1119790)

Multiple vulnerabilities have been found in GraphicsMagick, the image processing system.

CVE-2018-20184

The WriteTGAImage function (tga.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted image file.

CVE-2018-20185

The ReadBMPImage function (bmp.c) is affected by a heap-based buffer over-read. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted image file.

CVE-2018-20189

The ReadDIBImage function (coders/dib.c) is affected by an assertion error. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted image file.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u5.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
173434	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)	Nessus	Ubuntu Local Security Checks	critical
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
131696	Ubuntu 18.04 LTS : GraphicsMagick vulnerabilities (USN-4207-1)	Nessus	Ubuntu Local Security Checks	critical
120981	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1)	Nessus	SuSE Local Security Checks	medium
119953	openSUSE Security Update : GraphicsMagick (openSUSE-2018-1632)	Nessus	SuSE Local Security Checks	medium
119889	Debian DLA-1619-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2018-20189

medium

Tenable Plugins

medium

medium

critical

critical

critical

medium

medium

medium