graphicsmagick vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2017-14165

  The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive be…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Sep 6, 2017
• Unscored —
  CVE-2017-14314

  Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14504

  ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 forma…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Sep 17, 2017
• Unscored —
  CVE-2017-14649

  ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a deni…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Sep 21, 2017
• Unscored —
  CVE-2017-14733

  ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows …

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Sep 25, 2017
• Unscored —
  CVE-2017-14994

  ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointe…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Oct 3, 2017
• Unscored —
  CVE-2017-14997

  GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an …

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Oct 3, 2017
• Unscored —
  CVE-2017-15277 Public exploit EPSS 19%

  ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when pro…

  imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Oct 12, 2017
• Unscored —
  CVE-2017-15930

  In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG …

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Oct 27, 2017
• Unscored —
  CVE-2017-16352 Public exploit EPSS 15%

  GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image di…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Nov 1, 2017
• Unscored —
  CVE-2017-16353 Public exploit EPSS 14%

  GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage functio…

  graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Nov 1, 2017

References

• report
  https://ubuntu.com/security/CVE-2017-14165
• report
  https://ubuntu.com/security/CVE-2017-14314
• report
  https://ubuntu.com/security/CVE-2017-14504
• report
  https://ubuntu.com/security/CVE-2017-14649
• report
  https://ubuntu.com/security/CVE-2017-14733
• report
  https://ubuntu.com/security/CVE-2017-14994
• report
  https://ubuntu.com/security/CVE-2017-14997
• report
  https://ubuntu.com/security/CVE-2017-15277
• report
  https://ubuntu.com/security/CVE-2017-15930
• report
  https://ubuntu.com/security/CVE-2017-16352
• report
  https://ubuntu.com/security/CVE-2017-16353