Path traversal in GraphicsMagick - CVE-2019-12921

Vulnerability identifier: #VU26485

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-12921

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within TranslateTextEx component for processing SVG images in GraphicsMagick. A remote attacker can create a specially crafted SVG file and read contents of arbitrary files on the system.

GraphicsMagick
Ubuntu
SUSE Linux
Opensuse
openEuler
graphicsmagick (Alpine package)
graphicsmagick (Debian package)
graphicsmagick (Ubuntu package)
libgraphicsmagick++3 (Ubuntu package)
libgraphicsmagick3 (Ubuntu package)
libgraphicsmagick-q16-3 (Ubuntu package)
libgraphicsmagick++-q16-12 (Ubuntu package)
GraphicsMagick-devel
GraphicsMagick
GraphicsMagick-help
GraphicsMagick-c++-devel
GraphicsMagick-c++
GraphicsMagick-debuginfo
GraphicsMagick-perl
GraphicsMagick-debugsource

Install update from vendor's website.

GraphicsMagick - update to 1.3.32
graphicsmagick (Alpine package) - update to 1.3.35-r0
graphicsmagick (Debian package) - addressed in versions 1.3.30+hg15796-1~deb9u4, 1.3.30+hg15796-1+b1, 1.4+really1.3.33+hg16115-1+b1, 1.4+really1.3.35-1~deb10u1
graphicsmagick (Ubuntu package) - addressed in versions 1.3.18-1ubuntu3.1+esm7, 1.3.23-1ubuntu0.6+esm1, 1.3.28-2ubuntu0.1+esm1, 1.4+really1.3.35-1ubuntu0.1~esm1
libgraphicsmagick++3 (Ubuntu package) - update to 1.3.18-1ubuntu3.1+esm7
libgraphicsmagick3 (Ubuntu package) - update to 1.3.18-1ubuntu3.1+esm7
libgraphicsmagick-q16-3 (Ubuntu package) - addressed in versions 1.3.23-1ubuntu0.6+esm1, 1.3.28-2ubuntu0.1+esm1, 1.4+really1.3.35-1ubuntu0.1~esm1
libgraphicsmagick++-q16-12 (Ubuntu package) - addressed in versions 1.3.23-1ubuntu0.6+esm1, 1.3.28-2ubuntu0.1+esm1, 1.4+really1.3.35-1ubuntu0.1~esm1
GraphicsMagick-devel - update to 1.3.30-9
GraphicsMagick - update to 1.3.30-9
GraphicsMagick-help - update to 1.3.30-9
GraphicsMagick-c++-devel - update to 1.3.30-9
GraphicsMagick-c++ - update to 1.3.30-9
GraphicsMagick-debuginfo - update to 1.3.30-9
GraphicsMagick-perl - update to 1.3.30-9
GraphicsMagick-debugsource - update to 1.3.30-9

• Exploit #2246 - data-processing (Set of exploits for data processing open source libraries) (March 31, 2020)

• http://www.graphicsmagick.org/
• https://github.com/d0ge/data-processing/blob/master/CVE-2019-12921.md
• https://lists.debian.org/debian-lts-announce/2020/03/msg00026.html

• OpenSUSE Linux update for GraphicsMagick
• Multiple vulnerabilities in GraphicsMagick
• OpenSUSE Linux update for GraphicsMagick
• Debian update for graphicsmagick
• Path traversal in graphicsmagick (Alpine package)
• openEuler 20.03 LTS update for GraphicsMagick
• Ubuntu update for graphicsmagick