{"affected":[{"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-4.78.19.1","libGraphicsMagick2":"1.2.5-4.78.19.1","perl-GraphicsMagick":"1.2.5-4.78.19.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","name":"GraphicsMagick","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.19.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-4.78.19.1","libGraphicsMagick2":"1.2.5-4.78.19.1"}]},"package":{"ecosystem":"SUSE:Studio Onsite 1.3","name":"GraphicsMagick","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Studio%20Onsite%201.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.19.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for GraphicsMagick fixes the following issues:\n\n  * CVE-2017-11640: NULL pointer deref in WritePTIFImage() in coders/tiff.c could lead to denial of service [bsc#1050632]\n  * CVE-2017-14342: Memory exhaustion in ReadWPGImage in coders/wpg.c could lead to denial of service [bsc#1058485]\n  * CVE-2017-14341: Infinite loop in the ReadWPGImage function could lead to denial of service [bsc#1058637]\n  * CVE-2017-16546: Issue in ReadWPGImage function in coders/wpg.c could lead to denial of service [bsc#1067181]\n  * CVE-2017-16545: The ReadWPGImage function in coders/wpg.c in  validation problems could lead to denial of service [bsc#1067184]\n  * CVE-2017-16669: coders/wpg.c  allows remote attackers to cause a denial of service via crafted file [bsc#1067409]\n  * CVE-2017-13776: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056429]\n  * CVE-2017-13777: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056426]\n  * CVE-2017-13134: heap-based buffer over-read in the function SFWScan in coders/sfw.c could lead to denial of service via a crafted file [bsc#1055214]\n  * CVE-2017-15930: Null Pointer dereference  while transfering JPEG scanlines could lead to denial of service [bsc#1066003]\n  * CVE-2017-12983: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. [bsc#1054757] \n  * CVE-2017-14165: The ReadSUNImage function in coders/sun.c has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c. [bsc#1057508]\n  * CVE-2017-12587: Large loop vulnerability in the ReadPWPImage function in coders\\pwp.c. [bsc#1052450]\n","id":"SUSE-SU-2017:3435-1","modified":"2017-12-27T09:55:41Z","published":"2017-12-27T09:55:41Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1050632"},{"type":"REPORT","url":"https://bugzilla.suse.com/1052450"},{"type":"REPORT","url":"https://bugzilla.suse.com/1054757"},{"type":"REPORT","url":"https://bugzilla.suse.com/1055214"},{"type":"REPORT","url":"https://bugzilla.suse.com/1056426"},{"type":"REPORT","url":"https://bugzilla.suse.com/1056429"},{"type":"REPORT","url":"https://bugzilla.suse.com/1057508"},{"type":"REPORT","url":"https://bugzilla.suse.com/1058485"},{"type":"REPORT","url":"https://bugzilla.suse.com/1058637"},{"type":"REPORT","url":"https://bugzilla.suse.com/1066003"},{"type":"REPORT","url":"https://bugzilla.suse.com/1067181"},{"type":"REPORT","url":"https://bugzilla.suse.com/1067184"},{"type":"REPORT","url":"https://bugzilla.suse.com/1067409"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-7996"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-11640"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-12587"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-12983"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-13134"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-13776"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-13777"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-14165"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-14341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-14342"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-15930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-16545"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-16546"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-16669"}],"related":["CVE-2016-7996","CVE-2017-11640","CVE-2017-12587","CVE-2017-12983","CVE-2017-13134","CVE-2017-13776","CVE-2017-13777","CVE-2017-14165","CVE-2017-14341","CVE-2017-14342","CVE-2017-15930","CVE-2017-16545","CVE-2017-16546","CVE-2017-16669"],"summary":"Security update for GraphicsMagick","upstream":["CVE-2016-7996","CVE-2017-11640","CVE-2017-12587","CVE-2017-12983","CVE-2017-13134","CVE-2017-13776","CVE-2017-13777","CVE-2017-14165","CVE-2017-14341","CVE-2017-14342","CVE-2017-15930","CVE-2017-16545","CVE-2017-16546","CVE-2017-16669"]}