| Name | CVE-2017-10800 |
| Description | When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-4321-1, ELA-277-1 |
| Debian Bugs | 867060 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| graphicsmagick (PTS) | jessie, jessie (lts) | 1.3.20-3+deb8u14 | fixed |
| stretch (security) | 1.3.30+hg15796-1~deb9u5 | fixed |
| stretch (lts), stretch | 1.3.30+hg15796-1~deb9u7 | fixed |
| buster (security), buster, buster (lts) | 1.4+really1.3.35-1~deb10u3 | fixed |
| bullseye (security), bullseye | 1.4+really1.3.36+hg16481-2+deb11u1 | fixed |
| bookworm | 1.4+really1.3.40-4 | fixed |
| sid, trixie | 1.4+really1.3.45-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
[jessie] - graphicsmagick <no-dsa> (Minor issue)
[wheezy] - graphicsmagick <no-dsa> (Minor issue)
http://hg.code.sf.net/p/graphicsmagick/code/rev/e5761e3a2012
The above commit unfortunately is not enough. There are more related
changes, and Bob Friesenhahn commented that it's not complete. All
the rlated changesets to mat.c since the one referenced should be
picked up.