{"affected":[{"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-78.47.1","libGraphicsMagick2":"1.2.5-78.47.1","perl-GraphicsMagick":"1.2.5-78.47.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","name":"GraphicsMagick","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"GraphicsMagick":"1.2.5-78.47.1","libGraphicsMagick2":"1.2.5-78.47.1"}]},"package":{"ecosystem":"SUSE:Studio Onsite 1.3","name":"GraphicsMagick","purl":"pkg:rpm/suse/GraphicsMagick&distro=SUSE%20Studio%20Onsite%201.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for GraphicsMagick fixes the following issues:\n\n- security update (png.c)\n * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n    Attackers could leverage this vulnerability to cause a crash and denial of service \n    via a crafted mng file. [bsc#1086773]\n\n- security update (gif.c)\n * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n    which could lead to  denial of service via a crafted file. [bsc#1087027]\n\n\n- security update (pcd.c)\n * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n    which could lead to a denial of service via a crafted file. [bsc#1087037]\n  ","id":"SUSE-SU-2018:1036-1","modified":"2018-04-20T13:27:11Z","published":"2018-04-20T13:27:11Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181036-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1086773"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087027"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087037"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18251"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18254"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-9018"}],"related":["CVE-2017-18251","CVE-2017-18254","CVE-2018-9018"],"summary":"Security update for GraphicsMagick","upstream":["CVE-2017-18251","CVE-2017-18254","CVE-2018-9018"]}