CVE-2017-11403Use After Free in Graphicsmagick

CWE-416Use After Free19 documents7 sources
Severity
8.8HIGHNVD
OSV5.5
EPSS
1.0%
top 23.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 18
Latest updateMay 17

Description

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

debiandebian/graphicsmagick< graphicsmagick 1.3.26-8 (bookworm)+1
Debiangraphicsmagick/graphicsmagick< 1.3.26-3+7
Ubuntugraphicsmagick/graphicsmagick< 1.3.23-1ubuntu0.2

Patches

🔴Vulnerability Details

7
GHSA
GHSA-f9pv-j3cq-p428: The ReadJNGImage and ReadOneJNGImage functions in coders/png2022-05-17
GHSA
GHSA-pm5j-x49r-ccq7: The ReadOneJNGImage and ReadJNGImage functions in coders/png2022-05-14
GHSA
GHSA-2gx9-pfxr-fgh5: The ReadMNGImage function in coders/png2022-05-14
OSV
graphicsmagick vulnerabilities2019-12-02
OSV
CVE-2017-18220: The ReadOneJNGImage and ReadJNGImage functions in coders/png2018-03-05

📋Vendor Advisories

5
Ubuntu
GraphicsMagick vulnerabilities2019-12-02
Red Hat
GraphicsMagick: Use after free in ReadOneJNGImage and ReadJNGImage functions in coders/png.c allow an attacker to cause a denial of service via crafted file2018-03-06
Debian
CVE-2017-14103: graphicsmagick - The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick...2017
Debian
CVE-2017-18220: graphicsmagick - The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick...2017
Debian
CVE-2017-11403: graphicsmagick - The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of...2017

💬Community

4
Bugzilla
CVE-2017-14103 GraphicsMagick: Use-after-free in ReadJNGImage and ReadOneJNGImage functions in coders/png.c2017-09-05
Bugzilla
CVE-2017-11403 GraphicsMagick: Use-after-free in CloseBlob2017-07-18
Bugzilla
CVE-2017-11403 GraphicsMagick: Use-after-free in CloseBlob [epel-all]2017-07-18
Bugzilla
CVE-2017-11403 GraphicsMagick: Use-after-free in CloseBlob [fedora-all]2017-07-18