Detections
Analytics

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1276)

high Nessus Plugin ID 104615

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for GraphicsMagick fixes the following security issues :

 - CVE-2017-13776: denial of service issue in ReadXBMImage() in a coders/xbm.c (bsc#1056429)

 - CVE-2017-13777: denial of service issue in ReadXBMImage() in a coders/xbm.c (bsc#1056426)

 - CVE-2017-13134: heap-based buffer over-read allowing DoS via crafted sfw files (bsc#1055214)

 - CVE-2017-15930: Specially crafted JPEG files could lead to a NULL pointer dereference and DoS (bsc#1066003)

 - CVE-2017-14165: Memory allocation issue may allow DoS through specially crafted files (bsc#1057508)

 - CVE-2017-12983: Heap-based buffer overflow could have triggered an application crash or possibly have unspecified other impact via a crafted file.
 (bnc#1054757)

Solution

Update the affected GraphicsMagick packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1054757

https://bugzilla.opensuse.org/show_bug.cgi?id=1055214

https://bugzilla.opensuse.org/show_bug.cgi?id=1056426

https://bugzilla.opensuse.org/show_bug.cgi?id=1056429

https://bugzilla.opensuse.org/show_bug.cgi?id=1057508

https://bugzilla.opensuse.org/show_bug.cgi?id=1066003

Plugin Details

Severity: High

ID: 104615

File Name: openSUSE-2017-1276.nasl

Version: 3.4

Type: local

Agent: unix

Published: 11/16/2017

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS v3

Risk Factor: High

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libgraphicsmagick%2b%2b-devel, p-cpe:/a:novell:opensuse:libgraphicsmagick-q16-3, p-cpe:/a:novell:opensuse:libgraphicsmagickwand-q16-2, p-cpe:/a:novell:opensuse:graphicsmagick-devel, p-cpe:/a:novell:opensuse:libgraphicsmagick%2b%2b-q16-12, p-cpe:/a:novell:opensuse:graphicsmagick, p-cpe:/a:novell:opensuse:libgraphicsmagick-q16-3-debuginfo, cpe:/o:novell:opensuse:42.2, p-cpe:/a:novell:opensuse:perl-graphicsmagick, p-cpe:/a:novell:opensuse:libgraphicsmagick%2b%2b-q16-12-debuginfo, p-cpe:/a:novell:opensuse:graphicsmagick-debuginfo, p-cpe:/a:novell:opensuse:libgraphicsmagickwand-q16-2-debuginfo, cpe:/o:novell:opensuse:42.3, p-cpe:/a:novell:opensuse:perl-graphicsmagick-debuginfo, p-cpe:/a:novell:opensuse:graphicsmagick-debugsource, p-cpe:/a:novell:opensuse:libgraphicsmagick3-config

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 11/15/2017

Reference Information

CVE: CVE-2017-12983, CVE-2017-13134, CVE-2017-13776, CVE-2017-13777, CVE-2017-14165, CVE-2017-15930