CVE-2018-5357
ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 21
За последние 30 дней в imagemagick опубликовано уязвимостей: 67; в каталоге KEV: 0.
Уязвимостей: 815
CVE-2018-5248
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5247
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5246
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18022
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-1000476
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-1000445
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18008
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17934
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17914
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17887
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17886
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17885
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17884
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17883
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17882
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17881
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17880
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
- Обновитесь до 8:6.9.9.39+dfsg-1
Опубликовано ОбновленоCVE-2017-17879
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17682
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.