CVE-2019-11474

MEDIO 6.5CVE-2019-11474 · Published 23/04/2019 · updated 17/06/2026

In breve

CVE-2019-11474 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda graphicsmagick (graphicsmagick), backports sle (opensuse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
graphicsmagick graphicsmagick	`= 1.3.31`	No fix yet
backports sle opensuse	`= 15.0`	No fix yet

Description

coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.

References

hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd · Patch
hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8 · Patch
lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html · Mailing List
graphicsmagick.org/Changelog.html · Release Notes
securityfocus.com/bid/108055 · Mailing List
lists.debian.org/debian-lts-announce/2019/05/msg00027.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ

Altre vulnerabilità di graphicsmagick

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free