GraphicsMagick is vulnerable to denial of service. A remote attacker is able to crash the application via excessive memory allocation due to an integer underflow in ReadPICTImage
in coders/pict.c
.
hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=0683f8724200
www.securityfocus.com/bid/101183
lists.debian.org/debian-lts-announce/2018/08/msg00002.html
lists.fedoraproject.org/archives/list/[email protected]/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
lists.fedoraproject.org/archives/list/[email protected]/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
sourceforge.net/p/graphicsmagick/bugs/511/
sourceforge.net/p/graphicsmagick/code/ci/0683f8724200495059606c03f04e0d589b33ebe8/
www.debian.org/security/2018/dsa-4321