In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-532 advisory.

  - Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote     attackers to cause a denial of service via converting of crafted image file to pcx format.
    (CVE-2020-21679)

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of GraphicsMagick installed on the remote host is prior to 1.3.38-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2GRAPHICSMAGICK1.3-2023-001 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of GraphicsMagick installed on the remote host is prior to 1.3.38-1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1806 advisory.

  - Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote     attackers to cause a denial of service via converting of crafted image file to pcx format.
    (CVE-2020-21679)

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of GraphicsMagick installed on the remote host is prior to 1.3.32-1.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1799 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory.

  - In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage     function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because     the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.
    (CVE-2018-20184)

  - In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash     and denial of service via a dib file that is crafted to appear with direct pixel values and also     colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.
    (CVE-2018-20189)

  - In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function     (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an     image file with a crafted bit-field mask value. (CVE-2018-5685)

  - In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote     attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.
    (CVE-2018-9018)

  - In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function     ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information     disclosure via an RLE packet. (CVE-2019-11006)

  - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
    (CVE-2020-12672)

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1274-1 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5288 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3200 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202209-19 (GraphicsMagick: Multiple Vulnerabilities)

  - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
    (CVE-2020-12672)

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1885-1 advisory.

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

  - ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. (CVE-2022-28463)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
190732	Amazon Linux 2023 : GraphicsMagick, GraphicsMagick-c++, GraphicsMagick-c++-devel (ALAS2023-2024-532)	Nessus	Amazon Linux Local Security Checks	high
189326	Amazon Linux 2 : GraphicsMagick (ALASGRAPHICSMAGICK1.3-2023-001)	Nessus	Amazon Linux Local Security Checks	high
180076	Amazon Linux AMI : GraphicsMagick (ALAS-2023-1806)	Nessus	Amazon Linux Local Security Checks	high
179773	Amazon Linux AMI : GraphicsMagick (ALAS-2023-1799)	Nessus	Amazon Linux Local Security Checks	high
173434	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)	Nessus	Ubuntu Local Security Checks	critical
170217	openSUSE 15 Security Update : GraphicsMagick (SUSE-SU-2022:1274-1)	Nessus	SuSE Local Security Checks	high
168194	Debian DSA-5288-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	high
168015	Debian DLA-3200-1 : graphicsmagick - LTS security update	Nessus	Debian Local Security Checks	high
165544	GLSA-202209-19 : GraphicsMagick: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
161735	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2022:1885-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-1270

high

Tenable Plugins

high

high

high

high

critical

high

high

high

high

high