Executive Summary
| Summary | |
|---|---|
| Title | graphicsmagick update |
| Informations | |||
|---|---|---|---|
| Name | DSA-4321 | First vendor Publication | 2018-10-16 |
| Vendor | Debian | Last vendor Modification | 2018-10-28 |
| Severity (Vendor) | N/A | Revision | 2 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The update of Graphicsmagick in DSA-4321-1 introduced a change in the handling of case-sensitivity in an internal API function which could affect some code built against the GraphicsMagick libraries. This update restores the previous behaviour. For the stable distribution (stretch), these problems have been fixed in version 1.3.30+hg15796-1~deb9u2. We recommend that you upgrade your graphicsmagick packages. For the detailed security status of graphicsmagick please refer to its security tracker page at: https://security-tracker.debian.org/tracker/graphicsmagick |
Original Source
| Url : http://www.debian.org/security/2018/dsa-4321 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 30 % | CWE-125 | Out-of-bounds Read |
| 17 % | CWE-476 | NULL Pointer Dereference |
| 17 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 9 % | CWE-416 | Use After Free |
| 6 % | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 6 % | CWE-20 | Improper Input Validation |
| 4 % | CWE-770 | Allocation of Resources Without Limits or Throttling |
| 4 % | CWE-200 | Information Exposure |
| 2 % | CWE-772 | Missing Release of Resource after Effective Lifetime |
| 2 % | CWE-755 | Improper Handling of Exceptional Conditions |
| 2 % | CWE-415 | Double Free |
| 2 % | CWE-369 | Divide By Zero |
| 2 % | CWE-191 | Integer Underflow (Wrap or Wraparound) |
CPE : Common Platform Enumeration
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2019-09-12 | GraphicsMagick WMF use after free attempt RuleID : 50986 - Revision : 2 - Type : FILE-IMAGE |
| 2019-09-12 | GraphicsMagick WMF use after free attempt RuleID : 50985 - Revision : 2 - Type : FILE-IMAGE |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2018-10-18 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4321.nasl - Type : ACT_GATHER_INFO |
| 2018-08-03 | Name : The remote Debian host is missing a security update. File : debian_DLA-1456.nasl - Type : ACT_GATHER_INFO |
| 2018-06-28 | Name : The remote Debian host is missing a security update. File : debian_DLA-1401.nasl - Type : ACT_GATHER_INFO |
| 2018-06-21 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_25f73c4768a84a309cbc1ca5eea4d6ba.nasl - Type : ACT_GATHER_INFO |
| 2018-03-29 | Name : The remote Debian host is missing a security update. File : debian_DLA-1322.nasl - Type : ACT_GATHER_INFO |
| 2018-03-09 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2018-966.nasl - Type : ACT_GATHER_INFO |
| 2018-02-14 | Name : The remote Debian host is missing a security update. File : debian_DLA-1282.nasl - Type : ACT_GATHER_INFO |
| 2018-02-01 | Name : The remote Fedora host is missing a security update. File : fedora_2018-bfb9835edd.nasl - Type : ACT_GATHER_INFO |
| 2018-02-01 | Name : The remote Fedora host is missing a security update. File : fedora_2018-7c61d08c4f.nasl - Type : ACT_GATHER_INFO |
| 2018-01-16 | Name : The remote Debian host is missing a security update. File : debian_DLA-1245.nasl - Type : ACT_GATHER_INFO |
| 2018-01-09 | Name : The remote Debian host is missing a security update. File : debian_DLA-1231.nasl - Type : ACT_GATHER_INFO |
| 2017-12-18 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1386.nasl - Type : ACT_GATHER_INFO |
| 2017-12-14 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1362.nasl - Type : ACT_GATHER_INFO |
| 2017-12-14 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1346.nasl - Type : ACT_GATHER_INFO |
| 2017-11-20 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4040.nasl - Type : ACT_GATHER_INFO |
| 2017-11-16 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1276.nasl - Type : ACT_GATHER_INFO |
| 2017-11-14 | Name : The remote Debian host is missing a security update. File : debian_DLA-1170.nasl - Type : ACT_GATHER_INFO |
| 2017-11-13 | Name : The remote Debian host is missing a security update. File : debian_DLA-1168.nasl - Type : ACT_GATHER_INFO |
| 2017-11-13 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201711-07.nasl - Type : ACT_GATHER_INFO |
| 2017-11-13 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4032.nasl - Type : ACT_GATHER_INFO |
| 2017-11-06 | Name : The remote Debian host is missing a security update. File : debian_DLA-1159.nasl - Type : ACT_GATHER_INFO |
| 2017-11-02 | Name : The remote Debian host is missing a security update. File : debian_DLA-1154.nasl - Type : ACT_GATHER_INFO |
| 2017-10-30 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1199.nasl - Type : ACT_GATHER_INFO |
| 2017-10-20 | Name : The remote Debian host is missing a security update. File : debian_DLA-1140.nasl - Type : ACT_GATHER_INFO |
| 2017-10-20 | Name : The remote Debian host is missing a security update. File : debian_DLA-1139.nasl - Type : ACT_GATHER_INFO |
| 2017-09-15 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2017-891.nasl - Type : ACT_GATHER_INFO |
| 2017-09-01 | Name : The remote Debian host is missing a security update. File : debian_DLA-1082.nasl - Type : ACT_GATHER_INFO |
| 2017-09-01 | Name : The remote Debian host is missing a security update. File : debian_DLA-1081.nasl - Type : ACT_GATHER_INFO |
| 2017-08-29 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-971.nasl - Type : ACT_GATHER_INFO |
| 2017-08-25 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-966.nasl - Type : ACT_GATHER_INFO |
| 2017-08-18 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2017-2199-1.nasl - Type : ACT_GATHER_INFO |
| 2017-08-17 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2017-2176-1.nasl - Type : ACT_GATHER_INFO |
| 2017-07-31 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-851.nasl - Type : ACT_GATHER_INFO |
| 2017-07-31 | Name : The remote Debian host is missing a security update. File : debian_DLA-1045.nasl - Type : ACT_GATHER_INFO |
| 2017-07-27 | Name : The remote Fedora host is missing a security update. File : fedora_2017-758fafed81.nasl - Type : ACT_GATHER_INFO |
| 2017-07-27 | Name : The remote Fedora host is missing a security update. File : fedora_2017-6c52e2d731.nasl - Type : ACT_GATHER_INFO |
| 2017-07-24 | Name : The remote Fedora host is missing a security update. File : fedora_2017-0446b53fd8.nasl - Type : ACT_GATHER_INFO |
| 2017-07-21 | Name : The remote Fedora host is missing a security update. File : fedora_2017-fba331bb86.nasl - Type : ACT_GATHER_INFO |
| 2017-07-17 | Name : The remote Fedora host is missing a security update. File : fedora_2017-02008fed70.nasl - Type : ACT_GATHER_INFO |
| 2017-07-13 | Name : The remote Fedora host is missing a security update. File : fedora_2017-3ac2e9b354.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2018-10-28 21:18:49 |
|
| 2018-10-17 00:18:40 |
|
