graphicsmagick vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 10

• Unscored —
  CVE-2017-10794

  When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 2, 2017
• Unscored —
  CVE-2017-10799

  When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of …

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 3, 2017
• Unscored —
  CVE-2017-11102

  The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of serv…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 7, 2017
• Unscored —
  CVE-2017-11140

  The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of …

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 10, 2017
• Unscored —
  CVE-2017-11403 EPSS 28%

  The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a u…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 18, 2017
• Unscored —
  CVE-2017-11636

  GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple fram…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 26, 2017
• Unscored —
  CVE-2017-11637

  GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of m…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Jul 26, 2017
• Unscored —
  CVE-2017-13147

  In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c wh…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Aug 23, 2017
• Unscored —
  CVE-2017-14042

  A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The v…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Aug 30, 2017
• Unscored —
  CVE-2017-6335

  The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Mar 14, 2017

References

• report
  https://ubuntu.com/security/CVE-2017-6335
• report
  https://ubuntu.com/security/CVE-2017-10794
• report
  https://ubuntu.com/security/CVE-2017-10799
• report
  https://ubuntu.com/security/CVE-2017-11102
• report
  https://ubuntu.com/security/CVE-2017-11140
• report
  https://ubuntu.com/security/CVE-2017-11403
• report
  https://ubuntu.com/security/CVE-2017-11636
• report
  https://ubuntu.com/security/CVE-2017-11637
• report
  https://ubuntu.com/security/CVE-2017-13147
• report
  https://ubuntu.com/security/CVE-2017-14042