GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5190-1 advisory.

    It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An     attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM,     Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-12921)

    It was discovered that GraphicsMagick did not correctly handle memory allocations for error messages. An     attacker could use this issue to corrupt memory or possibly execute arbitrary code. This issue only     affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19950)

    It was discovered that GraphicsMagick did not correctly handle type limits. An attacker could use these     issues to cause heap-based buffer overflows, leading to a denial of service (application crash) or     possibly execute arbitrary code. These issues only affect Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu     18.04 ESM. (CVE-2019-19951, CVE-2019-19953)

    It was discovered that GraphicsMagick did not correctly handle the signed integer limit in 32-bit     applications. An attacker could use this issue to cause a heap-based buffer overflow, leading to a denial     of service (application crash) or possibly execute arbitrary code. This issue only affects Ubuntu 14.04     ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2020-10938)

    It was discovered that GraphicsMagick did not properly magnify certain images. An attacker could use this     issue to cause a heap-based buffer overflow, leading to a denial of service (application crash) or     possibly execute arbitrary code. (CVE-2020-12672)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory.

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted TGA image file, an attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-20184)

    It was discovered that GraphicsMagick was not properly validating bits per pixel data when processing DIB     image files. If a user or automated system were tricked into processing a specially crafted DIB image     file, an attacker could possibly use this issue to cause a denial of service. This issue only affected     Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-20189)

    It was discovered that GraphicsMagick was not properly processing bit-field mask values in BMP image     files, which could result in the execution of an infinite loop. If a user or automated system were tricked     into processing a specially crafted BMP image file, an attacker could possibly use this issue to cause a     denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-5685)

    It was discovered that GraphicsMagick was not properly validating data used in arithmetic operations when     processing MNG image files, which could result in a divide-by-zero error. If a user or automated system     were tricked into processing a specially crafted MNG image file, an attacker could possibly use this issue     to cause a denial of service. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
    (CVE-2018-9018)

    It was discovered that GraphicsMagick was not properly performing bounds checks when processing MIFF image     files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 ESM and Ubuntu     16.04 ESM. (CVE-2019-11006)

    It was discovered that GraphicsMagick did not properly magnify certain MNG image files, which could lead     to a heap buffer overflow. If a user or automated system were tricked into processing a specially crafted     MNG image file, an attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-12672)

    It was discovered that GraphicsMagick was not properly performing bounds checks when parsing certain MIFF     image files, which could lead to a heap buffer overflow. If a user or automated system were tricked into     processing a specially crafted MIFF image file, an attacker could possibly use this issue to cause a     denial of service or execute arbitrary code. (CVE-2022-1270)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202209-19 (GraphicsMagick: Multiple Vulnerabilities)

  - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
    (CVE-2020-12672)

  - In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVE-2022-1270)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2902 advisory.

  - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
    (CVE-2020-12672)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for GraphicsMagick fixes the following issues :

  - CVE-2020-12672: heap-based buffer overflow in     ReadMNGImage in coders/png.c. (boo#1171271)

A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images.

For Debian 8 'Jessie', this problem has been fixed in version 1.3.20-3+deb8u11.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183104	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : GraphicsMagick vulnerabilities (USN-5190-1)	Nessus	Ubuntu Local Security Checks	critical
173434	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)	Nessus	Ubuntu Local Security Checks	critical
165544	GLSA-202209-19 : GraphicsMagick: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
157252	Debian DLA-2902-1 : graphicsmagick - LTS security update	Nessus	Debian Local Security Checks	high
137228	openSUSE Security Update : GraphicsMagick (openSUSE-2020-779)	Nessus	SuSE Local Security Checks	high
137206	Debian DLA-2236-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-12672

high

Tenable Plugins

critical

critical

high

high

high

high