CVE-2018-8960
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read.
- Обновитесь до 8:6.9.9.39+dfsg-1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 23
За последние 30 дней в imagemagick опубликовано уязвимостей: 84; в каталоге KEV: 0.
Уязвимостей: 866
CVE-2018-8804
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
- Обновитесь до 8:6.9.9.39+dfsg-1
Опубликовано ОбновленоCVE-2017-18211
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18209
In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-7470
An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentation violation) via a crafted file.
- Обновитесь до 8:6.9.9.39+dfsg-1
Опубликовано ОбновленоCVE-2018-7443
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c).
- Обновитесь до 8:6.9.9.39+dfsg-1
Опубликовано ОбновленоCVE-2018-6405
In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18029
In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18028
In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18027
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5358
ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5357
ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5248
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5247
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2018-5246
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18022
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-1000476
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-1000445
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-18008
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-17934
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.