http://www.graphicsmagick.org/NEWS.html#june-15-2019
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2019-425a1aa7c9.
#
include("compat.inc");
if (description)
{
script_id(126356);
script_version("1.4");
script_cvs_date("Date: 2020/01/08");
script_cve_id("CVE-2017-11638", "CVE-2017-11642", "CVE-2017-11722", "CVE-2017-12805", "CVE-2017-12806", "CVE-2017-12935", "CVE-2017-12936", "CVE-2017-12937", "CVE-2017-13063", "CVE-2017-13064", "CVE-2017-13065", "CVE-2017-13648", "CVE-2017-13736", "CVE-2017-13737", "CVE-2017-13775", "CVE-2017-14504", "CVE-2017-14649", "CVE-2017-14733", "CVE-2017-14994", "CVE-2017-14997", "CVE-2017-15238", "CVE-2017-15930", "CVE-2017-16545", "CVE-2017-16547", "CVE-2017-17498", "CVE-2017-17500", "CVE-2017-17501", "CVE-2017-17502", "CVE-2017-17503", "CVE-2017-18219", "CVE-2017-18220", "CVE-2018-6799", "CVE-2019-11470", "CVE-2019-11472", "CVE-2019-11473", "CVE-2019-11474");
script_xref(name:"FEDORA", value:"2019-425a1aa7c9");
script_name(english:"Fedora 29 : GraphicsMagick (2019-425a1aa7c9)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"http://www.graphicsmagick.org/NEWS.html#june-15-2019
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"http://www.graphicsmagick.org/NEWS.html#june-15-2019"
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-425a1aa7c9"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected GraphicsMagick package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-6799");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:GraphicsMagick");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:29");
script_set_attribute(attribute:"vuln_publication_date", value:"2017/07/26");
script_set_attribute(attribute:"patch_publication_date", value:"2019/06/30");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/07/01");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^29([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 29", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC29", reference:"GraphicsMagick-1.3.32-1.fc29")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "GraphicsMagick");
}
Vendor | Product | Version |
---|---|---|
fedoraproject | fedora | graphicsmagick |
fedoraproject | fedora | 29 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12805
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12806
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13648
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13736
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14649
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11470
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11472
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11473
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11474
www.graphicsmagick.org/NEWS.html#june-15-2019
bodhi.fedoraproject.org/updates/FEDORA-2019-425a1aa7c9