CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 9
За последние 30 дней в imagemagick опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 341
CVE-2017-13143
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13139
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13134
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13131
In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13062
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13060
In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13059
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-13058
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12983
Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12674
In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12670
In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12644
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12643
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12640
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12587
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12563
In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12435
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано ОбновленоCVE-2017-12433
In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c.
- Обновитесь до 8:6.8.9.9-7ubuntu5.11
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.