Security update for GraphicsMagick (moderate)

🗓️ 29 Apr 2019 00:00:00Reported by OpenSuseType

opensuse🔗 lists.opensuse.org👁 51 Views

Security update for GraphicsMagick fixing 6 vulnerabilitie

Reporter	Title	Published	Views	Family All 166
BDU FSTEC	The vulnerability of the WriteXWDImage function in the GraphicsMagick graphics editor, related to writing beyond buffer boundaries, allows attackers to access confidential information or cause service failures.	29 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMIFFImage function in the GraphicsMagick graphics editor arises from the possibility of writing operations outside of the buffer in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SVGStartElement function in the GraphicsMagick graphics editor involves an operation that goes beyond the buffer boundaries in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMNGImage function in the GraphicsMagick graphics editor arises from the possibility of data being written outside the buffer in memory. This allows an attacker to gain unauthorized access to information and compromise its accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadXWDImage function in the GraphicsMagick graphics editor arises from reading beyond the buffer boundaries in memory. This allows an attacker to gain unauthorized access to information and compromise its integrity and accessibility.	13 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadMPCImage function in the GraphicsMagick graphics editor, related to resource management errors, allows a hacker to cause a service failure.	13 May 202000:00	–	bdu_fstec
CNVD	GraphicsMagick buffer overread vulnerability (CNVD-2019-12506)	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Over Read Vulnerability	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Overflow Vulnerability (CNVD-2019-12508)	9 Apr 201900:00	–	cnvd
CNVD	GraphicsMagick Buffer Overread Vulnerability (CNVD-2019-12509)	9 Apr 201900:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse backports	15	x86_64	graphicsmagick-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	GraphicsMagick
opensuse backports	15	x86_64	graphicsmagick-devel-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	GraphicsMagick-devel
opensuse backports	15	x86_64	libgraphicsmagick++-q16-12-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	libGraphicsMagick++-Q16-12
opensuse backports	15	x86_64	libgraphicsmagick++-devel-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	libGraphicsMagick++-devel
opensuse backports	15	x86_64	libgraphicsmagick-q16-3-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	libGraphicsMagick-Q16-3
opensuse backports	15	x86_64	libgraphicsmagick3-config-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	libGraphicsMagick3-config
opensuse backports	15	x86_64	libgraphicsmagickwand-q16-2-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	libGraphicsMagickWand-Q16-2
opensuse backports	15	x86_64	perl-graphicsmagick-1.3.29-bp150.2.18.1.x86_64.rpm	1.3.29	perl-GraphicsMagick

29 Apr 2019 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 27.5

CVSS 39.8

CVSS 3.18.8

EPSS0.0377

graphicsmagick vulnerabilities buffer overflow information disclosure memory leak denial of service opensuse patch.