Lucene search
+L

2727 matches found

OpenVAS
OpenVAS
added 2018/12/27 12:00 a.m.24 views

Debian: Security Advisory (DLA-1619-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.2AI score0.02307EPSS
SaveExploits3References3
ossfuzz
ossfuzz
added 2018/12/24 8:35 a.m.25 views

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in ExportGrayQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5702333384622080 Project: graphicsmagick Fuzzer: libFuzzercoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2018/12/19 7:52 p.m.17 views

graphicsmagick/coder_PICT_fuzzer: Heap-buffer-overflow in ExpandBuffer

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5748073695805440 Project: graphicsmagick Fuzzer: aflcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2018/12/19 4:53 p.m.16 views

graphicsmagick/coder_MIFF_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5115066047791104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMIFFfuzzer Fuzz target binary: coderMIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2018/12/19 7:36 a.m.33 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The user can input malicious DIB file to the ReadDIBImage function of coders/dib.c to trigger the attack. This vulnerability also affects GraphicsMagick...

6.5CVSS6.1AI score0.02278EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/18 12:00 a.m.11 views

The vulnerability of the GraphicsMagick graphic editor, related to the lack of checks for division by zero, allows a hacker to trigger a service failure.

The vulnerability of the GraphicsMagick graphic editor is related to an error that causes division by zero when reading MNG images from the png.c file. Exploiting this vulnerability can allow a remote attacker to cause the application to terminate abnormally using a specially crafted image...

6.5CVSS6.6AI score0.03079EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/12/17 8:29 p.m.7 views

DEBIAN-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.4AI score0.02278EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/17 8:29 p.m.12 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.2AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/12/17 8:29 p.m.33 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References5
OSV
OSV
added 2018/12/17 8:29 p.m.8 views

UBUNTU-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References6
Prion
Prion
added 2018/12/17 8:29 p.m.30 views

Information disclosure

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

4.3CVSS6.3AI score0.02278EPSS
SaveExploits1References6Affected Software2
NVD
NVD
added 2018/12/17 8:29 p.m.24 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.5AI score0.02278EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2018/12/17 8:00 p.m.40 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

5.7AI score0.02278EPSS
SaveExploits1References6
CVE
CVE
added 2018/12/17 8:00 p.m.190 views

CVE-2018-20189

GraphicsMagick 1.3.31 is affected by CVE-2018-20189 in the ReadDIBImage function (coders/dib.c). A crafted DIB image that exploits direct pixel values with colormapping (not supported beyond 8-bits/sample) can trigger missing indexes initialization, causing a crash and denial of service. No furth...

6.5CVSS5.6AI score0.02278EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2018/12/17 8:00 p.m.56 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.6AI score0.02278EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2018/12/17 8:00 p.m.58 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS5.9AI score0.02278EPSS
SaveExploits1
NVD
NVD
added 2018/12/17 7:29 p.m.22 views

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS7AI score0.02307EPSS
SaveExploits1References6
OSV
OSV
added 2018/12/17 7:29 p.m.10 views

DEBIAN-CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

5.3CVSS6.8AI score0.02107EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/17 7:29 p.m.14 views

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

5.3CVSS6.3AI score
SaveExploits0References6
OSV
OSV
added 2018/12/17 7:29 p.m.4 views

DEBIAN-CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS6.3AI score0.02307EPSS
SaveExploits1References1
Rows per page
Query Builder