Security update for GraphicsMagick SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:3435-1 Final 1 1 2017-12-27T09:55:41Z current 2017-12-27T09:55:41Z 2017-12-27T09:55:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for GraphicsMagick This update for GraphicsMagick fixes the following issues: * CVE-2017-11640: NULL pointer deref in WritePTIFImage() in coders/tiff.c could lead to denial of service [bsc#1050632] * CVE-2017-14342: Memory exhaustion in ReadWPGImage in coders/wpg.c could lead to denial of service [bsc#1058485] * CVE-2017-14341: Infinite loop in the ReadWPGImage function could lead to denial of service [bsc#1058637] * CVE-2017-16546: Issue in ReadWPGImage function in coders/wpg.c could lead to denial of service [bsc#1067181] * CVE-2017-16545: The ReadWPGImage function in coders/wpg.c in validation problems could lead to denial of service [bsc#1067184] * CVE-2017-16669: coders/wpg.c allows remote attackers to cause a denial of service via crafted file [bsc#1067409] * CVE-2017-13776: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056429] * CVE-2017-13777: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056426] * CVE-2017-13134: heap-based buffer over-read in the function SFWScan in coders/sfw.c could lead to denial of service via a crafted file [bsc#1055214] * CVE-2017-15930: Null Pointer dereference while transfering JPEG scanlines could lead to denial of service [bsc#1066003] * CVE-2017-12983: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. [bsc#1054757] * CVE-2017-14165: The ReadSUNImage function in coders/sun.c has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c. [bsc#1057508] * CVE-2017-12587: Large loop vulnerability in the ReadPWPImage function in coders\pwp.c. [bsc#1052450] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-GraphicsMagick-13386,slestso13-GraphicsMagick-13386 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ Link for SUSE-SU-2017:3435-1 https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00093.html E-Mail link for SUSE-SU-2017:3435-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1050632 SUSE Bug 1050632 https://bugzilla.suse.com/1052450 SUSE Bug 1052450 https://bugzilla.suse.com/1054757 SUSE Bug 1054757 https://bugzilla.suse.com/1055214 SUSE Bug 1055214 https://bugzilla.suse.com/1056426 SUSE Bug 1056426 https://bugzilla.suse.com/1056429 SUSE Bug 1056429 https://bugzilla.suse.com/1057508 SUSE Bug 1057508 https://bugzilla.suse.com/1058485 SUSE Bug 1058485 https://bugzilla.suse.com/1058637 SUSE Bug 1058637 https://bugzilla.suse.com/1066003 SUSE Bug 1066003 https://bugzilla.suse.com/1067181 SUSE Bug 1067181 https://bugzilla.suse.com/1067184 SUSE Bug 1067184 https://bugzilla.suse.com/1067409 SUSE Bug 1067409 https://www.suse.com/security/cve/CVE-2016-7996/ SUSE CVE CVE-2016-7996 page https://www.suse.com/security/cve/CVE-2017-11640/ SUSE CVE CVE-2017-11640 page https://www.suse.com/security/cve/CVE-2017-12587/ SUSE CVE CVE-2017-12587 page https://www.suse.com/security/cve/CVE-2017-12983/ SUSE CVE CVE-2017-12983 page https://www.suse.com/security/cve/CVE-2017-13134/ SUSE CVE CVE-2017-13134 page https://www.suse.com/security/cve/CVE-2017-13776/ SUSE CVE CVE-2017-13776 page https://www.suse.com/security/cve/CVE-2017-13777/ SUSE CVE CVE-2017-13777 page https://www.suse.com/security/cve/CVE-2017-14165/ SUSE CVE CVE-2017-14165 page https://www.suse.com/security/cve/CVE-2017-14341/ SUSE CVE CVE-2017-14341 page https://www.suse.com/security/cve/CVE-2017-14342/ SUSE CVE CVE-2017-14342 page https://www.suse.com/security/cve/CVE-2017-15930/ SUSE CVE CVE-2017-15930 page https://www.suse.com/security/cve/CVE-2017-16545/ SUSE CVE CVE-2017-16545 page https://www.suse.com/security/cve/CVE-2017-16546/ SUSE CVE CVE-2017-16546 page https://www.suse.com/security/cve/CVE-2017-16669/ SUSE CVE CVE-2017-16669 page SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 GraphicsMagick-1.2.5-4.78.19.1 libGraphicsMagick2-1.2.5-4.78.19.1 perl-GraphicsMagick-1.2.5-4.78.19.1 GraphicsMagick-1.2.5-4.78.19.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2-1.2.5-4.78.19.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick-1.2.5-4.78.19.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GraphicsMagick-1.2.5-4.78.19.1 as a component of SUSE Studio Onsite 1.3 libGraphicsMagick2-1.2.5-4.78.19.1 as a component of SUSE Studio Onsite 1.3 Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries. CVE-2016-7996 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2016-7996.html CVE-2016-7996 https://bugzilla.suse.com/1003629 SUSE Bug 1003629 https://bugzilla.suse.com/1067184 SUSE Bug 1067184 When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. CVE-2017-11640 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-11640.html CVE-2017-11640 https://bugzilla.suse.com/1050632 SUSE Bug 1050632 ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. CVE-2017-12587 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-12587.html CVE-2017-12587 https://bugzilla.suse.com/1052450 SUSE Bug 1052450 Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. CVE-2017-12983 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-12983.html CVE-2017-12983 https://bugzilla.suse.com/1054757 SUSE Bug 1054757 In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file. CVE-2017-13134 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-13134.html CVE-2017-13134 https://bugzilla.suse.com/1055214 SUSE Bug 1055214 GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. CVE-2017-13776 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-13776.html CVE-2017-13776 https://bugzilla.suse.com/1056429 SUSE Bug 1056429 https://bugzilla.suse.com/1106855 SUSE Bug 1106855 GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it. CVE-2017-13777 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-13777.html CVE-2017-13777 https://bugzilla.suse.com/1056426 SUSE Bug 1056426 https://bugzilla.suse.com/1057719 SUSE Bug 1057719 The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c. CVE-2017-14165 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-14165.html CVE-2017-14165 https://bugzilla.suse.com/1052553 SUSE Bug 1052553 https://bugzilla.suse.com/1057508 SUSE Bug 1057508 https://bugzilla.suse.com/1059666 SUSE Bug 1059666 ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. CVE-2017-14341 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-14341.html CVE-2017-14341 https://bugzilla.suse.com/1058637 SUSE Bug 1058637 ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. CVE-2017-14342 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-14342.html CVE-2017-14342 https://bugzilla.suse.com/1058485 SUSE Bug 1058485 In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer. CVE-2017-15930 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-15930.html CVE-2017-15930 https://bugzilla.suse.com/1066003 SUSE Bug 1066003 The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have unspecified other impact via a malformed WPG image. CVE-2017-16545 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-16545.html CVE-2017-16545 https://bugzilla.suse.com/1067184 SUSE Bug 1067184 The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file. CVE-2017-16546 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-16546.html CVE-2017-16546 https://bugzilla.suse.com/1067181 SUSE Bug 1067181 coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c. CVE-2017-16669 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.78.19.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-4.78.19.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-4.78.19.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/ https://www.suse.com/security/cve/CVE-2017-16669.html CVE-2017-16669 https://bugzilla.suse.com/1067409 SUSE Bug 1067409 https://bugzilla.suse.com/1072898 SUSE Bug 1072898