CVE-2019-11506
Fixed in a distro release EPSS 3%
In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to ExportRedQuantumType in magick/export.c.
Products: graphicsmagick, debian_linux, canonical ubuntu_linux, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphicsmagick | 1.4~hg15968-1 |
| Debian 13 | graphicsmagick | 1.4~hg15968-1 |
| Debian 14 | graphicsmagick | 1.4~hg15968-1 |
| Debian 8 | graphicsmagick | 1.3.20-3+deb8u7 |
| SUSE Linux Enterprise Desktop 12 SP3 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | ImageMagick | 7.0.7.34-3.61.3 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | ImageMagick | 7.0.7.34-3.61.3 |
| SUSE Linux Enterprise Module for Development Tools 15 | ImageMagick | 7.0.7.34-3.61.3 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | ImageMagick | 7.0.7.34-3.61.3 |
| SUSE Linux Enterprise Server 12 SP3 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Server 12 SP4 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | ImageMagick | 6.8.8.1-71.123.2 |
| SUSE Package Hub 15 | GraphicsMagick | 1.3.29-bp150.2.21.1 |
| Ubuntu 18.04 LTS | graphicsmagick | 1.3.28-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | graphicsmagick | no fix |
| Ubuntu Pro 16.04 LTS | graphicsmagick | no fix |
| openSUSE Leap 15.0 | GraphicsMagick | 1.3.29-lp150.3.28.1 |
| openSUSE Leap 15.0 | ImageMagick | 7.0.7.34-lp151.7.3.1 |
| openSUSE Leap 15.1 | ImageMagick | 7.0.7.34-lp151.7.3.1 |
| openSUSE Tumbleweed | ImageMagick | 7.1.0.9-1.1 |