Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-20184

EPSS 0.71% · P72
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-20184

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GraphicsMagick 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GraphicsMagick是一套简单的图像处理工具。该工具对图像提供尺寸调整、旋转、加亮等功能。 GraphicsMagick 1.4 snapshot-20181209 Q8版本中的tga.c文件的‘WriteTGAImage’函数存在基于堆的缓冲区溢出漏洞。攻击者可借助特制的图像文件利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-20184

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-20184

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-12-17 · 69 CVEs total

CVE-2018-20172Nagios XI 跨站脚本漏洞
CVE-2018-20092PTC ThingWorx Platform 路径遍历漏洞
CVE-2018-20123QEMU 资源管理错误漏洞
CVE-2018-19976YARA 安全漏洞
CVE-2018-14855Samsung Galaxy S6 bcmdhd4358 Wi-Fi驱动程序缓冲区错误漏洞
CVE-2018-14854Samsung Galaxy S6 bcmdhd4358 Wi-Fi驱动程序缓冲区错误漏洞
CVE-2018-14853Samsung Galaxy S6 bcmdhd4358 Wi-Fi驱动程序安全漏洞
CVE-2018-14852Samsung Galaxy S6 bcmdhd4358 Wi-Fi驱动程序安全漏洞
CVE-2018-20186Bento4 安全漏洞
CVE-2018-20185GraphicsMagick 缓冲区错误漏洞
CVE-2018-14856Samsung Galaxy S6 bcmdhd4358 Wi-Fi驱动程序缓冲区错误漏洞
CVE-2018-20171Nagios XI 跨站脚本漏洞
CVE-2018-20027Pylearn2 安全漏洞
CVE-2018-19822Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19821Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19820Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19819Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19818Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19817Infovista VistaPortal SE 跨站脚本漏洞
CVE-2018-19816Infovista VistaPortal SE 跨站脚本漏洞

Showing top 20 of 69 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-20184

No comments yet

Leave a comment