Heap-based buffer overflow in GraphicsMagick - CVE-2020-12672

Vulnerability identifier: #VU27562

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-12672

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the "ReadMNGImage" in coders/png.c. A remote attacker can trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GraphicsMagick
Gentoo Linux
Ubuntu
SUSE Linux
Opensuse
openEuler
graphicsmagick (Alpine package)
collectd (Alpine package)
libgraphicsmagick-q16-3 (Ubuntu package)
graphicsmagick (Ubuntu package)
libgraphicsmagick3 (Ubuntu package)
GraphicsMagick
GraphicsMagick-help
GraphicsMagick-c++-devel
GraphicsMagick-c++
GraphicsMagick-debuginfo
GraphicsMagick-perl
GraphicsMagick-debugsource
GraphicsMagick-devel
media-gfx/graphicsmagick

Install update from vendor's website.

graphicsmagick (Alpine package) - update to 1.3.35-r2
libgraphicsmagick-q16-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.4+really1.3.35-1ubuntu0.1
graphicsmagick (Ubuntu package) - addressed in versions Ubuntu Pro, 1.4+really1.3.35-1ubuntu0.1
libgraphicsmagick3 (Ubuntu package) - update to Ubuntu Pro
GraphicsMagick - update to 1.3.30-9
GraphicsMagick-help - update to 1.3.30-9
GraphicsMagick-c++-devel - update to 1.3.30-9
GraphicsMagick-c++ - update to 1.3.30-9
GraphicsMagick-debuginfo - update to 1.3.30-9
GraphicsMagick-perl - update to 1.3.30-9
GraphicsMagick-debugsource - update to 1.3.30-9
GraphicsMagick-devel - update to 1.3.30-9
media-gfx/graphicsmagick - update to 1.3.38

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19025

• Remote code execution in GraphicsMagick
• OpenSUSE Linux update for GraphicsMagick
• OpenSUSE Linux update for GraphicsMagick
• Heap-based buffer overflow in graphicsmagick (Alpine package)
• Heap-based buffer overflow in collectd (Alpine package)
• Gentoo update for GraphicsMagick
• Ubuntu update for graphicsmagick
• openEuler 20.03 LTS update for GraphicsMagick