CVE-2020-21679
Fixed in a distro release EPSS <1%
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.
Products: graphicsmagick
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | GraphicsMagick | 1.3.38-1.amzn2023.0.4 |
| Amazon Linux 2023 | GraphicsMagick-c++ | 1.3.38-1.amzn2023.0.4 |
| Amazon Linux 2023 | GraphicsMagick-c++-devel | 1.3.38-1.amzn2023.0.4 |
| Amazon Linux 2023 | GraphicsMagick-devel | 1.3.38-1.amzn2023.0.4 |
| Amazon Linux 2023 | GraphicsMagick-doc | 1.3.38-1.amzn2023.0.4 |
| Amazon Linux 2023 | GraphicsMagick-perl | 1.3.38-1.amzn2023.0.4 |
| Debian 12 | graphicsmagick | 1.4+really1.3.34+hg16181-1 |
| Debian 13 | graphicsmagick | 1.4+really1.3.34+hg16181-1 |
| Debian 14 | graphicsmagick | 1.4+really1.3.34+hg16181-1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | ImageMagick | 7.0.7.34-150000.3.123.1 |
| SUSE Linux Enterprise Server 12 SP5 | ImageMagick | 6.8.8.1-71.198.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | ImageMagick | 7.0.7.34-150000.3.123.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ImageMagick | 6.8.8.1-71.198.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | ImageMagick | 7.0.7.34-150000.3.123.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ImageMagick | 6.8.8.1-71.198.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | ImageMagick | 6.8.8.1-71.198.1 |
| Ubuntu Pro 14.04 LTS | graphicsmagick | no fix |
| Ubuntu Pro 16.04 LTS | graphicsmagick | no fix |
| Ubuntu Pro 18.04 LTS | graphicsmagick | no fix |
| openSUSE Leap 15.4 | ImageMagick | 7.0.7.34-150200.10.54.1 |