Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-17913

Fixed in a distro release EPSS 2%

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.

Published 2017-12-26 · CVE record · OSV

Products: graphicsmagick, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12graphicsmagick1.3.27-3
Debian 13graphicsmagick1.3.27-3
Debian 14graphicsmagick1.3.27-3
Debian 9graphicsmagick1.3.30+hg15796-1~deb9u1
Ubuntu 16.04 LTSgraphicsmagick1.3.23-1ubuntu0.6