In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary
    files via a crafted image because of TranslateTextEx for SVG. (CVE-2019-12921)

  - There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the
    function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. (CVE-2018-18544)

  - In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash
    and denial of service via a dib file that is crafted to appear with direct pixel values and also
    colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.
    (CVE-2018-20189)

  - In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in
    WritePDFImage in coders/pdf.c. (CVE-2019-7397)

  - coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read
    and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and
    CVE-2019-11009. (CVE-2019-11473)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5190-1 advisory.

    It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An     attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM,     Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-12921)

    It was discovered that GraphicsMagick did not correctly handle memory allocations for error messages. An     attacker could use this issue to corrupt memory or possibly execute arbitrary code. This issue only     affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19950)

    It was discovered that GraphicsMagick did not correctly handle type limits. An attacker could use these     issues to cause heap-based buffer overflows, leading to a denial of service (application crash) or     possibly execute arbitrary code. These issues only affect Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu     18.04 ESM. (CVE-2019-19951, CVE-2019-19953)

    It was discovered that GraphicsMagick did not correctly handle the signed integer limit in 32-bit     applications. An attacker could use this issue to cause a heap-based buffer overflow, leading to a denial     of service (application crash) or possibly execute arbitrary code. This issue only affects Ubuntu 14.04     ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2020-10938)

    It was discovered that GraphicsMagick did not properly magnify certain images. An attacker could use this     issue to cause a heap-based buffer overflow, leading to a denial of service (application crash) or     possibly execute arbitrary code. (CVE-2020-12672)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in GraphicsMagick, a set of command-line applications to manipulate image files, which could result in information disclosure, denial of service or the execution of arbitrary code if malformed image files are processed.

This update for GraphicsMagick fixes the following issues :

  - CVE-2019-12921: Fixed an issue where text filename     components potentially coulf have allowed reading of     arbitrary files via TranslateTextEx (boo#1167208).

  - CVE-2020-10938: Fixed an integer overflow and resultant     heap-based buffer overflow in HuffmanDecodeImages     (boo#1167623).

A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that allows allows an attacker to read arbitrary files via a crafted image because of TranslateTextEx for SVG.

For Debian 8 'Jessie', this problem has been fixed in version 1.3.20-3+deb8u9.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
404821	Alpine: multiple graphicsmagick packages: security update to 1.3.32-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
183104	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : GraphicsMagick vulnerabilities (USN-5190-1)	Nessus	Ubuntu Local Security Checks	critical
136371	Debian DSA-4675-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
135022	openSUSE Security Update : GraphicsMagick (openSUSE-2020-416)	Nessus	SuSE Local Security Checks	critical
134769	Debian DLA-2152-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2019-12921

medium

Tenable Plugins

medium

medium

critical

critical

critical

medium