Open-Source Security Intelligence

Know every vulnerability
before it knows you.

DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.

Checkout DevGuardView on GitHub
Search

DSA-4321-1

Published Oct 16, 2018·Last modified Mar 9, 2026
Affected Components(0)

No affected components available

Description

graphicsmagick - security update

Risk Scores
Base Score
0.0

Measures severity based on intrinsic characteristics of the vulnerability, independent of environment.

Threat Intelligence
0.0

No exploitation activity has been observed at this time. Continue routine monitoring.

EPSS
19.19%

The exploit probability is low. The vulnerability is unlikely to be exploited in the next 30 days.

Exploit
Not available

We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.

Related Vulnerabilities
  • CVE-2017-10794
    Upstream
  • CVE-2017-10799
    Upstream
  • CVE-2017-10800
    Upstream
  • CVE-2017-11102
    Upstream
  • CVE-2017-11139
    Upstream
  • CVE-2017-11140
    Upstream
  • CVE-2017-11403
    Upstream
  • CVE-2017-11636
    Upstream
  • CVE-2017-11637
    Upstream
  • CVE-2017-11638
    Upstream
  • CVE-2017-11641
    Upstream
  • CVE-2017-11642
    Upstream
  • CVE-2017-11643
    Upstream
  • CVE-2017-11722
    Upstream
  • CVE-2017-12935
    Upstream
  • CVE-2017-12936
    Upstream
  • CVE-2017-12937
    Upstream
  • CVE-2017-13063
    Upstream
  • CVE-2017-13064
    Upstream
  • CVE-2017-13065
    Upstream
  • CVE-2017-13134

    In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.

    UpstreamEPSS 2.0%
  • CVE-2017-13737
    Upstream
  • CVE-2017-13775
    Upstream
  • CVE-2017-13776
    Upstream
  • CVE-2017-13777
    Upstream
  • CVE-2017-14314
    Upstream
  • CVE-2017-14504
    Upstream
  • CVE-2017-14733
    Upstream
  • CVE-2017-14994
    Upstream
  • CVE-2017-14997
    Upstream
  • CVE-2017-15238
    Upstream
  • CVE-2017-15277

    ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

    UpstreamEPSS 19.2%
  • CVE-2017-15930
    Upstream
  • CVE-2017-16352
    Upstream
  • CVE-2017-16353
    Upstream
  • CVE-2017-16545
    Upstream
  • CVE-2017-16547
    Upstream
  • CVE-2017-16669
    Upstream
  • CVE-2017-17498
    Upstream
  • CVE-2017-17500
    Upstream
  • CVE-2017-17501
    Upstream
  • CVE-2017-17502
    Upstream
  • CVE-2017-17503
    Upstream
  • CVE-2017-17782
    Upstream
  • CVE-2017-17783
    Upstream
  • CVE-2017-17912
    Upstream
  • CVE-2017-17913
    Upstream
  • CVE-2017-17915
    Upstream
  • CVE-2017-18219
    Upstream
  • CVE-2017-18220
    Upstream
  • CVE-2017-18229
    Upstream
  • CVE-2017-18230
    Upstream
  • CVE-2017-18231
    Upstream
  • CVE-2018-5685
    Upstream
  • CVE-2018-6799
    Upstream
  • CVE-2018-9018
    Upstream
  • EUVD-2017-2775
    Upstream
  • EUVD-2017-2439
    Upstream
  • EUVD-2017-2443
    Upstream
  • EUVD-2017-2444
    Upstream
  • EUVD-2017-2739
    Upstream
  • EUVD-2017-2774
    Upstream
  • EUVD-2017-3030
    Upstream
  • EUVD-2017-3248
    Upstream
  • EUVD-2017-3249
    Upstream
  • EUVD-2017-3250
    Upstream
  • EUVD-2017-3253
    Upstream
  • EUVD-2017-3254
    Upstream
  • EUVD-2017-3255
    Upstream
  • EUVD-2017-3332
    Upstream
  • EUVD-2017-4459
    Upstream
  • EUVD-2017-4460
    Upstream
  • EUVD-2017-4461
    Upstream
  • EUVD-2017-4581
    Upstream
  • EUVD-2017-4582
    Upstream
  • EUVD-2017-4583
    Upstream
  • EUVD-2017-4651
    Upstream
  • EUVD-2017-5254
    Upstream
  • EUVD-2017-5290
    Upstream
  • EUVD-2017-5291
    Upstream
  • EUVD-2017-5292
    Upstream
  • EUVD-2017-5817
    Upstream
  • EUVD-2017-6006
    Upstream
  • EUVD-2017-6230
    Upstream
  • EUVD-2017-6470
    Upstream
  • EUVD-2017-6473
    Upstream
  • EUVD-2017-6698
    Upstream
  • EUVD-2017-6737
    Upstream
  • EUVD-2017-7346
    Upstream
  • EUVD-2017-7547
    Upstream
  • EUVD-2017-7548
    Upstream
  • EUVD-2017-7738
    Upstream
  • EUVD-2017-7740
    Upstream
  • EUVD-2017-7853
    Upstream
  • EUVD-2017-8659
    Upstream
  • EUVD-2017-8661
    Upstream
  • EUVD-2017-8662
    Upstream
  • EUVD-2017-8663
    Upstream
  • EUVD-2017-8664
    Upstream
  • EUVD-2017-8933
    Upstream
  • EUVD-2017-8934
    Upstream
  • EUVD-2017-9055
    Upstream
  • EUVD-2017-9056
    Upstream
  • EUVD-2017-9058
    Upstream
  • EUVD-2017-9351
    Upstream
  • EUVD-2017-9352
    Upstream
  • EUVD-2017-9361
    Upstream
  • EUVD-2017-9362
    Upstream
  • EUVD-2017-9363
    Upstream
  • EUVD-2018-17454
    Upstream
  • EUVD-2018-18546
    Upstream
  • EUVD-2018-20623
    Upstream
Scan your project

Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.

Checkout DevGuard