Vulnetix
Try Vulnetix Request Demo
CVE-2018-20184 PUBLISHED

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.

EPSS 0.26% · 49.9th percentile

Risk Scores

EPSS Score
0.26%
49.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSgraphicsmagick0, 1.3.16-1.1ubuntu2, 1.3.16-1.1ubuntu3
Ubuntu:18.04:LTSgraphicsmagick1.3.28-2, 0, 1.3.26-15
Ubuntu:Pro:16.04:LTSgraphicsmagick1.3.23-1ubuntu0.5, 1.3.23-1ubuntu0.6, 1.3.23-1ubuntu0.6+esm1

Timeline

References

Open in Interactive Console →