QwikSec

Security Database

CVE

CWE

Training

CVE-2017-18229

Published: Mar 14, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/752c0b41fa32

x_refsource_CONFIRM

https://sourceforge.net/p/graphicsmagick/bugs/461/

x_refsource_CONFIRM

[debian-lts-announce] 20180328 [SECURITY] [DLA 1322-1] graphicsmagick security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

[debian-lts-announce] 20180803 [SECURITY] [DLA 1456-1] graphicsmagick security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.