CVE-2019-11473: Medium severity GraphicsMagick Graphicsmagick vulnerability
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.36+hg16481-2+deb11u1Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1Fixed in 1.4+really1.3.46-2 - Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.32-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-11473.
What is the severity rating of CVE-2019-11473?
CVE-2019-11473 has a severity rating of 6.5 (Medium).
What is the impact of CVE-2019-11473?
CVE-2019-11473 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting a malicious XWD image file.
Which software versions are affected by CVE-2019-11473?
GraphicsMagick versions 1.3.31 are affected by CVE-2019-11473.
How can I fix CVE-2019-11473?
To fix CVE-2019-11473, you can update to one of the following versions: 1.4+really1.3.35-1~deb10u2, 1.4+really1.3.35-1~deb10u3, 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, 1.4+really1.3.42-1.