CVE-2017-11638: Input Validation
GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-11638?
CVE-2017-11638 is a vulnerability in GraphicsMagick 1.3.26 that results in a segmentation violation when processing a non-colormapped image.
What is the severity of CVE-2017-11638?
The severity of CVE-2017-11638 is high, with a CVSS score of 8.8.
Which software versions are affected by CVE-2017-11638?
GraphicsMagick 1.3.26 is affected by CVE-2017-11638.
How can I mitigate CVE-2017-11638?
To mitigate CVE-2017-11638, update GraphicsMagick to version 1.3.18-1ubuntu3.1+ (for Ubuntu) or 1.3.23-1ubuntu0.3 (for Ubuntu Xenial), or install the appropriate security patch for your distribution.
Where can I find more information about CVE-2017-11638?
You can find more information about CVE-2017-11638 on the following references: [1] http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9, [2] https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html, [3] https://www.debian.org/security/2018/dsa-4321