CVE-2017-13066 — Missing Release of Resource after Effective Lifetime in Graphicsmagick

CWE-772 — Missing Release of Resource after Effective LifetimeCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 56.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GraphicsmagickDebian Graphicsmagick
Timeline
PublishedAug 22
Latest updateMay 13

Description

GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/graphicsmagick< graphicsmagick 1.3.27-1 (bookworm)
▶Debiangraphicsmagick/graphicsmagick< 1.3.27-1+3

🔴Vulnerability Details

2
GHSA
GHSA-8hvw-vw2f-mvvg: GraphicsMagick 1↗2022-05-13
▶
OSV
CVE-2017-13066: GraphicsMagick 1↗2017-08-22
▶

📋Vendor Advisories

2
Red Hat
GraphicsMagick: Memory leak in CloneImage function in magick/image.c↗2017-08-23
▶
Debian
CVE-2017-13066: graphicsmagick - GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage...↗2017
▶

💬Community

3
Bugzilla
CVE-2017-13066 GraphicsMagick: ImageMagick, GraphicsMagick: Memory leak in CloneImage function in magick/image.c [epel-all]↗2017-08-23
▶
Bugzilla
CVE-2017-13066 ImageMagick, GraphicsMagick: Memory leak in CloneImage function in magick/image.c↗2017-08-23
▶
Bugzilla
CVE-2017-13066 ImageMagick: ImageMagick, GraphicsMagick: Memory leak in CloneImage function in magick/image.c [fedora-all]↗2017-08-23
▶