Null pointer dereference in GraphicsMagick - CVE-2017-15930

Vulnerability identifier: #VU9811

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-15930

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to an error n ReadOneJNGImage in coders/png.c. A remote attacker can transfer specially crafted JPEG scanlines, trigger null pointer dereference, related to a PixelPacket pointer and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

GraphicsMagick
Arch Linux
Fedora
SUSE Linux
Opensuse
graphicsmagick (Alpine package)
GraphicsMagick

Install update from vendor's website.

graphicsmagick (Alpine package) - update to 1.3.27-r0
GraphicsMagick - addressed in versions 1.3.32-1.fc29, 1.3.32-1.fc30, 1.3.34-1.el7, 1.3.34-1.el8

• http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=6fc54b6d2be8
• http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=da135eaedc3b

• openSUSE update for ImageMagick
• SUSE Linux update for ImageMagick
• SUSE Linux update for ImageMagick
• Null pointer dereference in graphicsmagick (Alpine package)
• Arch Linux update for graphicsmagick
• Fedora 30 update for GraphicsMagick
• Fedora 29 update for GraphicsMagick
• Fedora EPEL 8 update for GraphicsMagick
• Fedora EPEL 7 update for GraphicsMagick