Heap-based buffer over-read in GraphicsMagick - CVE-2018-20185
Published: December 18, 2018
Vulnerability identifier: #VU16587
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-20185
CWE-ID: CWE-126
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists in GraphicsMagick installations with customized BMP limits due to heap-based buffer over-read in the ReadBMPImage function of bmp.c when processing malicious input. A remote attacker can cause the service to crash via a crafted bmp image file.
Affected software
GraphicsMagick
Debian Linux
Fedora
graphicsmagick (Ubuntu package)
graphicsmagick (Debian package)
GraphicsMagick
Debian Linux
Fedora
graphicsmagick (Ubuntu package)
graphicsmagick (Debian package)
GraphicsMagick
How to mitigate CVE-2018-20185
Install update from vendor's website.
graphicsmagick (Ubuntu package) - update to 1.3.28-2ubuntu0.1
graphicsmagick (Debian package) - addressed in versions 1.3.30+hg15796-1~deb9u3, 1.4~hg15978-1+deb10u1
GraphicsMagick - addressed in versions 1.3.34-1.el7, 1.3.34-1.el8
graphicsmagick (Debian package) - addressed in versions 1.3.30+hg15796-1~deb9u3, 1.4~hg15978-1+deb10u1
GraphicsMagick - addressed in versions 1.3.34-1.el7, 1.3.34-1.el8