In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4207-1 advisory.

    It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498). 

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501). The following     fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054). 

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053). 

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203). 

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501).

The following fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054).

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053).

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203).

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-9956: Fixed a stack-based buffer overflow in     PopHexPixel() (bsc#1130330).

  - CVE-2019-10650: Fixed a heap-based buffer over-read in     WriteTIFFImage() (bsc#1131317).

  - CVE-2019-7175: Fixed multiple memory leaks in     DecodeImage function (bsc#1128649).

  - CVE-2018-20467: Fixed infinite loop in coders/bmp.c     (bsc#1120381).

  - CVE-2019-7398: Fixed a memory leak in the function     WriteDIBImage (bsc#1124365).

  - CVE-2019-7397: Fixed a memory leak in the function     WritePDFImage (bsc#1124366).

  - CVE-2019-7395: Fixed a memory leak in the function     WritePSDChannel (bsc#1124368).

  - CVE-2018-16413: Fixed a heap-based buffer over-read in     PushShortPixel() (bsc#1106989).

  - CVE-2018-16412: Fixed a heap-based buffer over-read in     ParseImageResourceBlocks() (bsc#1106996).

  - CVE-2018-16644: Fixed a regression in dcm coder     (bsc#1107609).

  - CVE-2019-11007: Fixed a heap-based buffer overflow in     ReadMNGImage() (bsc#1132060).

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     WriteXWDImage() (bsc#1132054).

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     ReadXWDImage() (bsc#1132053).

  - Added extra -config- packages with Postscript/EPS/PDF     readers still enabled.

    Removing the PS decoders is used to harden ImageMagick     against security issues within ghostscript. Enabling     them might impact security. (bsc#1122033)

    These are two packages that can be selected :

  - ImageMagick-config-6-SUSE: This has the PS decoders     disabled.

  - ImageMagick-config-6-upstream: This has the PS decoders     enabled.

    Depending on your local needs install either one of     them. The default is the -SUSE configuration.

This update was imported from the SUSE:SLE-12:Update update project.

This update for ImageMagick fixes the following issues :

Security issues fixed :

CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel() (bsc#1130330).

CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage() (bsc#1131317).

CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649).

CVE-2018-20467: Fixed infinite loop in coders/bmp.c (bsc#1120381).

CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365).

CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366).

CVE-2019-7395: Fixed a memory leak in the function WritePSDChannel (bsc#1124368).

CVE-2018-16413: Fixed a heap-based buffer over-read in PushShortPixel() (bsc#1106989).

CVE-2018-16412: Fixed a heap-based buffer over-read in ParseImageResourceBlocks() (bsc#1106996).

CVE-2018-16644: Fixed a regression in dcm coder (bsc#1107609).

CVE-2019-11007: Fixed a heap-based buffer overflow in ReadMNGImage() (bsc#1132060).

CVE-2019-11008: Fixed a heap-based buffer overflow in WriteXWDImage() (bsc#1132054).

CVE-2019-11009: Fixed a heap-based buffer over-read in ReadXWDImage() (bsc#1132053).

Added extra -config- packages with Postscript/EPS/PDF readers still enabled.

Removing the PS decoders is used to harden ImageMagick against security issues within ghostscript. Enabling them might impact security. (bsc#1122033)

These are two packages that can be selected :

  - ImageMagick-config-6-SUSE: This has the PS decoders     disabled.

  - ImageMagick-config-6-upstream: This has the PS decoders     enabled.

    Depending on your local needs install either one of     them. The default is the -SUSE configuration.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for GraphicsMagick fixes the following issues :

  - CVE-2019-11005: Fixed a stack-based buffer overflow in     SVGStartElement of coders/svg.c that allowed attackers     to cause DOS or an unspecified impact (boo#1132058)

  - CVE-2019-11006: Fixed a heap-based buffer over-read in     the function ReadMIFFImage of coders/miff.c that allowed     attackers to cause DOS or information disclosure     (boo#1132061)

  - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of     coders/mpc.c that which allowed attackers to cause DOS     via a crafted image file (boo#1132055)

  - CVE-2019-11007: Fixed a heap-based buffer over-read in     the ReadMNGImage function of coders/png.c that which     allowed attackers to cause a denial of service or     information disclosure (boo#1132060)

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage of coders/xwd.c that which     allowed remote attackers to cause DOS or other     unspecified impact (boo#1132054)

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage of coders/xwd.c that which     allowed attackers to cause DOS or information disclosure     (boo#1132053)

Several security vulnerabilities were discovered in Graphicsmagick, a collection of image processing tools. Heap-based buffer over-reads and a memory leak may lead to a denial of service or information disclosure.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u6.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
131696	Ubuntu 18.04 LTS : GraphicsMagick vulnerabilities (USN-4207-1)	Nessus	Ubuntu Local Security Checks	critical
124755	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1355)	Nessus	SuSE Local Security Checks	high
124754	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1354)	Nessus	SuSE Local Security Checks	high
124639	openSUSE Security Update : ImageMagick (openSUSE-2019-1320)	Nessus	SuSE Local Security Checks	high
124315	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)	Nessus	SuSE Local Security Checks	high
124309	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1272)	Nessus	SuSE Local Security Checks	critical
124036	Debian DLA-1755-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-11009

high

Tenable Plugins

critical

critical

high

high

high

high

critical

critical