In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5190-1 advisory.

    It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An     attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM,     Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-12921)

    It was discovered that GraphicsMagick did not correctly handle memory allocations for error messages. An     attacker could use this issue to corrupt memory or possibly execute arbitrary code. This issue only     affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19950)

    It was discovered that GraphicsMagick did not correctly handle type limits. An attacker could use these     issues to cause heap-based buffer overflows, leading to a denial of service (application crash) or     possibly execute arbitrary code. These issues only affect Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu     18.04 ESM. (CVE-2019-19951, CVE-2019-19953)

    It was discovered that GraphicsMagick did not correctly handle the signed integer limit in 32-bit     applications. An attacker could use this issue to cause a heap-based buffer overflow, leading to a denial     of service (application crash) or possibly execute arbitrary code. This issue only affects Ubuntu 14.04     ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2020-10938)

    It was discovered that GraphicsMagick did not properly magnify certain images. An attacker could use this     issue to cause a heap-based buffer overflow, leading to a denial of service (application crash) or     possibly execute arbitrary code. (CVE-2020-12672)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

Three issues have been found in graphicsmagick, a collection of image processing tools. They are basically a heap-based buffer over-read, heap-based buffer overflow and a use-after-free in different functions.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u8.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for GraphicsMagick fixes the following issues :

  - CVE-2019-19950: Fixed a use-after-free in ThrowException     and ThrowLoggedException of magick/error.c.
    (boo#1159852)

  - CVE-2019-19951: Fixed a heap-based buffer overflow in     ImportRLEPixels() (boo#1160321).

  - CVE-2019-19953: Fixed a heap-based buffer overflow in     EncodeImage() (boo#1160364).

ID	Name	Product	Family	Severity
183104	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : GraphicsMagick vulnerabilities (USN-5190-1)	Nessus	Ubuntu Local Security Checks	critical
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	critical
133322	Debian DLA-2084-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	critical
132916	openSUSE Security Update : GraphicsMagick (openSUSE-2020-55)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-19953

critical

Tenable Plugins

critical

critical

critical

critical