coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read     and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and     CVE-2019-11009. (CVE-2019-11473)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary
    files via a crafted image because of TranslateTextEx for SVG. (CVE-2019-12921)

  - There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the
    function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. (CVE-2018-18544)

  - In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash
    and denial of service via a dib file that is crafted to appear with direct pixel values and also
    colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.
    (CVE-2018-20189)

  - In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in
    WritePDFImage in coders/pdf.c. (CVE-2019-7397)

  - coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read
    and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and
    CVE-2019-11009. (CVE-2019-11473)

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4207-1 advisory.

    It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New bug and security fix release, see http://www.graphicsmagick.org/NEWS.html#june-15-2019

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

http://www.graphicsmagick.org/NEWS.html#june-15-2019

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit :

CVE-2019-11473

The WriteMATLABImage function (coders/mat.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via crafted Matlab matrices.

CVE-2019-11474

The WritePDBImage function (coders/pdb.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via a crafted Palm Database file.

CVE-2019-11505 CVE-2019-11506

The XWD module (coders/xwd.c) is affected by multiple heap-based buffer overflows and arithmetic exceptions. Remote attackers might leverage these various flaws to cause denial of service or any other unspecified impact via crafted XWD files.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u7.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498). 

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501). The following     fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054). 

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053). 

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203). 

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501).

The following fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054).

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053).

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203).

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

ID	Name	Product	Family	Severity
255113	Linux Distros Unpatched Vulnerability : CVE-2019-11473	Nessus	Misc.	medium
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
131696	Ubuntu 18.04 LTS : GraphicsMagick vulnerabilities (USN-4207-1)	Nessus	Ubuntu Local Security Checks	critical
126361	Fedora 30 : GraphicsMagick (2019-da4c20882c)	Nessus	Fedora Local Security Checks	high
126356	Fedora 29 : GraphicsMagick (2019-425a1aa7c9)	Nessus	Fedora Local Security Checks	high
125296	Debian DLA-1795-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	high
124755	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1355)	Nessus	SuSE Local Security Checks	high
124754	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1354)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-11473

medium

Tenable Plugins

medium

medium

medium

critical

critical

high

high

high

high

high