CVE-2017-11638 — Improper Input Validation in Graphicsmagick

CWE-20 — Improper Input ValidationCWE-476 — NULL Pointer Dereference13 documents6 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 45.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GraphicsmagickDebian Graphicsmagick
Timeline
PublishedJul 26
Latest updateMay 14

Description

GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶debiandebian/graphicsmagick< graphicsmagick 1.3.26-4 (bookworm)
▶Debiangraphicsmagick/graphicsmagick< 1.3.26-4+3

🔴Vulnerability Details

4
GHSA
GHSA-jqmp-hjg9-vhwh: GraphicsMagick 1↗2022-05-14
▶
GHSA
GHSA-9c62-wq8x-6267: GraphicsMagick 1↗2022-05-14
▶
OSV
CVE-2017-11638: GraphicsMagick 1↗2017-07-26
▶
OSV
CVE-2017-11642: GraphicsMagick 1↗2017-07-26
▶

📋Vendor Advisories

3
Ubuntu
GraphicsMagick vulnerabilities↗2019-12-16
▶
Debian
CVE-2017-11642: graphicsmagick - GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() func...↗2017
▶
Debian
CVE-2017-11638: graphicsmagick - GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() functi...↗2017
▶

💬Community

4
Bugzilla
CVE-2017-11638 GraphicsMagick: Segmentation violation in the WriteMAPImage() function↗2017-07-27
▶
Bugzilla
CVE-2017-11638 CVE-2017-11642 CVE-2017-11722 CVE-2017-12935 CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13648 CVE-2017-14042 CVE-2017-14314 GraphicsMagick: vari↗2017-07-26
▶
Bugzilla
CVE-2017-11642 GraphicsMagick: NULL pointer dereference in theWriteMAPImage in coders/map.c↗2017-07-26
▶
Bugzilla
CVE-2017-11638 CVE-2017-11642 CVE-2017-11722 CVE-2017-12935 CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13648 CVE-2017-13736 CVE-2017-13737 CVE-2017-13775 ... G↗2017-07-26
▶