CVE-2017-15033
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 4
За последние 30 дней в imagemagick опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 321
CVE-2017-15032
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-15016
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14989
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14741
The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14739
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14684
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14682
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14607
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14533
ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14531
ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14505
DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14400
In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14343
ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14342
ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14341
ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14326
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14325
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано ОбновленоCVE-2017-14249
ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.7.7.10-6ubuntu3.11
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.