{"schema_version":"1.7.3","id":"SUSE-SU-2018:1036-1","published":"2018-04-20T13:27:11Z","modified":"2026-02-04T04:04:19.323099Z","related":["CVE-2017-18251","CVE-2017-18254","CVE-2018-9018"],"upstream":["CVE-2017-18251","CVE-2017-18254","CVE-2018-9018"],"summary":"Security update for GraphicsMagick","details":"This update for GraphicsMagick fixes the following issues:\n\n- security update (png.c)\n * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n    Attackers could leverage this vulnerability to cause a crash and denial of service \n    via a crafted mng file. [bsc#1086773]\n\n- security update (gif.c)\n * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n    which could lead to  denial of service via a crafted file. [bsc#1087027]\n\n\n- security update (pcd.c)\n * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n    which could lead to a denial of service via a crafted file. [bsc#1087037]\n  ","affected":[{"package":{"name":"GraphicsMagick","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}]}],"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-78.47.1","libGraphicsMagick2":"1.2.5-78.47.1","perl-GraphicsMagick":"1.2.5-78.47.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1036-1.json"}},{"package":{"name":"GraphicsMagick","ecosystem":"SUSE:Studio Onsite 1.3","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Studio%20Onsite%201.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}]}],"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-78.47.1","libGraphicsMagick2":"1.2.5-78.47.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1036-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181036-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1086773"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087027"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087037"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18251"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18254"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-9018"}]}