CVE-2019-11474 — Out-of-bounds Write in Graphicsmagick

CWE-787 — Out-of-bounds Write9 documents7 sources
Severity
6.5MEDIUMNVD
CNA8.8OSV8.8
EPSS
3.0%
top 13.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
GraphicsmagickCanonical Ubuntu LinuxDebian Linux+3 more
Timeline
PublishedApr 23
Latest updateMay 24

Description

coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶Debiangraphicsmagick/graphicsmagick< 1.4~hg15976-1+3
▶NVDopensuse/leap15.0, 42.3+1

Also affects: Debian Linux 10.0, 8.0, 9.0, Fedora 29, 30, Ubuntu Linux 18.04

Patches

Patch: hg.graphicsmagick.org ↗Patch: hg.graphicsmagick.org ↗Patch: hg.graphicsmagick.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-39vh-5vp8-mrhx: coders/xwd↗2022-05-24
▶
CVEList
CVE-2019-11474: coders/xwd↗2019-04-23
▶
OSV
CVE-2019-11474: coders/xwd↗2019-04-23
▶

📋Vendor Advisories

2
Ubuntu
GraphicsMagick vulnerabilities↗2019-12-03
▶
Debian
CVE-2019-11474: graphicsmagick - coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of serv...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-11474 GraphicsMagick: floating point exception in coders/xwd.c causing denial of service [fedora-all]↗2019-05-08
▶
Bugzilla
CVE-2019-11474 graphicsmagick: floating point exception in coders/xwd.c causing denial of service↗2019-05-08
▶
Bugzilla
CVE-2019-11474 GraphicsMagick: floating point exception in coders/xwd.c causing denial of service [epel-all]↗2019-05-08
▶
CVE-2019-11474 — Out-of-bounds Write in Graphicsmagick | cvebase