PT-2017-12995 · Graphicsmagick+1 · Graphicsmagick+1

Bestshow · Publicado 2017-08-23 · Atualizado 2019-10-03 · CVE-2017-13648

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26

Description A memory leak issue was discovered in the function ReadMATImage in coders/mat.c.

Recommendations For GraphicsMagick version 1.3.26, consider updating to a newer version to mitigate the risk, however at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2017-13648

SUSE-SU-2018:0130-1

SUSE-SU-2018:0132-1

Produtos afetados

Graphicsmagick

Suse

Referências · 81

• 🔥 https://sourceforge.net/p/graphicsmagick/bugs/433 · Exploit
• https://suse.com/security/cve/CVE-2017-13658 · Nota
• https://sourceforge.net/p/graphicsmagick/code/ci/b6c54b2d5991 · Nota
• https://bugzilla.suse.com/1052771 · Nota
• https://bugzilla.suse.com/1051446 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20180132-1 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20180130-1 · Nota
• https://suse.com/security/cve/CVE-2017-11529 · Nota
• https://bugzilla.suse.com/1052710 · Nota
• https://suse.com/security/cve/CVE-2017-12672 · Nota
• https://suse.com/security/cve/CVE-2017-12430 · Nota
• https://suse.com/security/cve/CVE-2017-11644 · Nota
• https://bugzilla.suse.com/1055065 · Nota
• https://suse.com/security/cve/CVE-2017-1000476 · Nota
• https://bugzilla.suse.com/1052252 · Nota