In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory.

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted TGA image file, an attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-20184)

    It was discovered that GraphicsMagick was not properly validating bits per pixel data when processing DIB     image files. If a user or automated system were tricked into processing a specially crafted DIB image     file, an attacker could possibly use this issue to cause a denial of service. This issue only affected     Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-20189)

    It was discovered that GraphicsMagick was not properly processing bit-field mask values in BMP image     files, which could result in the execution of an infinite loop. If a user or automated system were tricked     into processing a specially crafted BMP image file, an attacker could possibly use this issue to cause a     denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-5685)

    It was discovered that GraphicsMagick was not properly validating data used in arithmetic operations when     processing MNG image files, which could result in a divide-by-zero error. If a user or automated system     were tricked into processing a specially crafted MNG image file, an attacker could possibly use this issue     to cause a denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-9018)

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing MIFF image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 ESM and Ubuntu     16.04 ESM. (CVE-2019-11006)

    It was discovered that GraphicsMagick did not properly magnify certain MNG image files, which could lead     to a heap buffer overflow. If a user or automated system were tricked into processing a specially crafted     MNG image file, an attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-12672)

    It was discovered that GraphicsMagick was not properly performing bounds checks when parsing certain MIFF     image files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or execute arbitrary code. (CVE-2022-1270)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4207-1 advisory.

    It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for GraphicsMagick fixes the following issues :

  - CVE-2019-11005: Fixed a stack-based buffer overflow in     SVGStartElement of coders/svg.c that allowed attackers     to cause DOS or an unspecified impact (boo#1132058)

  - CVE-2019-11006: Fixed a heap-based buffer over-read in     the function ReadMIFFImage of coders/miff.c that allowed     attackers to cause DOS or information disclosure     (boo#1132061)

  - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of     coders/mpc.c that which allowed attackers to cause DOS     via a crafted image file (boo#1132055)

  - CVE-2019-11007: Fixed a heap-based buffer over-read in     the ReadMNGImage function of coders/png.c that which     allowed attackers to cause a denial of service or     information disclosure (boo#1132060)

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage of coders/xwd.c that which     allowed remote attackers to cause DOS or other     unspecified impact (boo#1132054)

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage of coders/xwd.c that which     allowed attackers to cause DOS or information disclosure     (boo#1132053)

Several security vulnerabilities were discovered in Graphicsmagick, a collection of image processing tools. Heap-based buffer over-reads and a memory leak may lead to a denial of service or information disclosure.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u6.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
173434	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)	Nessus	Ubuntu Local Security Checks	critical
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
131696	Ubuntu 18.04 LTS : GraphicsMagick vulnerabilities (USN-4207-1)	Nessus	Ubuntu Local Security Checks	critical
124309	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1272)	Nessus	SuSE Local Security Checks	critical
124036	Debian DLA-1755-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-11006

critical

Tenable Plugins

critical

critical

critical

critical

critical