Security update for GraphicsMagick (moderate)

🗓️ 25 Apr 2019 00:00:00Reported by OpenSuseType

opensuse

opensuse🔗 lists.opensuse.org👁 124 Views

Security update for GraphicsMagick fixing 6 vulnerabilitie

Reporter	Title	Published	Views	Family All 166
BDU FSTEC	The vulnerability of the WriteXWDImage function in the GraphicsMagick graphics editor, related to writing beyond buffer boundaries, allows attackers to access confidential information or cause service failures.	29 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMIFFImage function in the GraphicsMagick graphics editor arises from the possibility of writing operations outside of the buffer in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SVGStartElement function in the GraphicsMagick graphics editor involves an operation that goes beyond the buffer boundaries in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMNGImage function in the GraphicsMagick graphics editor arises from the possibility of data being written outside the buffer in memory. This allows an attacker to gain unauthorized access to information and compromise its accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadXWDImage function in the GraphicsMagick graphics editor arises from reading beyond the buffer boundaries in memory. This allows an attacker to gain unauthorized access to information and compromise its integrity and accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMPCImage function in the GraphicsMagick graphics editor, related to resource management errors, allows a hacker to cause a service failure.	13 May 202000:00	–	bdu_fstec
CNVD	GraphicsMagick buffer overread vulnerability (CNVD-2019-12506)	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Over Read Vulnerability	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Overflow Vulnerability (CNVD-2019-12508)	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Overread Vulnerability (CNVD-2019-12509)	9 Apr 201900:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse	15.0	i586	graphicsmagick-1.3.25-132.1.i586.rpm	1.3.25	GraphicsMagick
opensuse	15.0	i586	graphicsmagick-1.3.29-lp150.3.25.1.i586.rpm	1.3.29	GraphicsMagick
opensuse	15.0	i586	graphicsmagick-debuginfo-1.3.25-132.1.i586.rpm	1.3.25	GraphicsMagick-debuginfo
opensuse	15.0	i586	graphicsmagick-debuginfo-1.3.29-lp150.3.25.1.i586.rpm	1.3.29	GraphicsMagick-debuginfo
opensuse	15.0	i586	graphicsmagick-debugsource-1.3.25-132.1.i586.rpm	1.3.25	GraphicsMagick-debugsource
opensuse	15.0	i586	graphicsmagick-debugsource-1.3.29-lp150.3.25.1.i586.rpm	1.3.29	GraphicsMagick-debugsource
opensuse	15.0	i586	graphicsmagick-devel-1.3.25-132.1.i586.rpm	1.3.25	GraphicsMagick-devel
opensuse	15.0	i586	graphicsmagick-devel-1.3.29-lp150.3.25.1.i586.rpm	1.3.29	GraphicsMagick-devel
opensuse	15.0	i586	libgraphicsmagick++-q16-12-1.3.25-132.1.i586.rpm	1.3.25	libGraphicsMagick++-Q16-12
opensuse	15.0	i586	libgraphicsmagick++-q16-12-1.3.29-lp150.3.25.1.i586.rpm	1.3.29	libGraphicsMagick++-Q16-12

25 Apr 2019 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 27.5

CVSS 39.8

CVSS 3.18.8

EPSS0.0377

graphicsmagick vulnerabilities update stack-based buffer overflow heap-based buffer over-read memory leak denial of service information disclosure buffer overflow opensuse leap 42.3 opensuse leap 15.0 patch installation methods yast online_update zypper