K000156727: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2019-7395 In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. CVE-2019-7396 In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. CVE-2019-7397 In ImageMagick before 7.0.8-25 and...

Linux Distros Unpatched Vulnerability : CVE-2019-7398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. CVE-2019-7398 Note that Nessus relies on the presence of the package as...

Ubuntu: Security Advisory (USN-7068-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: ImageMagick

Issue Overview: Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable. CVE-2016-5841 ImageMagick 7.0.7-12 Q16, a CPU exhaustion...

SUSE: Security Advisory (SUSE-SU-2019:1033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2019-1114)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2019-1297)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4034-1: ImageMagick vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could...

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1320-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. CVE-2019-7175: Fixed multiple memory leaks in DecodeImag...

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1141-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-1114)

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398 Note that Tenable Network Security has...

SUSE-SU-2019:13995-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function bsc1128649. - CVE-2018-20467: Fixed infinite loop in coders/bmp.c bsc1120381 - CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2019:13993-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function bsc1128649. CVE-2018-18544: Fixed memory leak in the function WriteMSLImage bsc1113064. CVE-2018-20467: Fixed infinite loop in coders/bmp.c bsc112038...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:0739-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function bsc1128649. CVE-2018-18544: Fixed a memory leak in the function WriteMSLImage bsc1113064. CVE-2018-20467: Fixed an infinite loop in coders/bmp.c...

ImageMagick < 7.0.8-25 Multiple Vulnerabilities - Windows

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"; if...

ImageMagick < 7.0.8-25 Multiple Vulnerabilities - Linux

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"; if...

ImageMagick < 7.0.8-25 Multiple Vulnerabilities - Mac OS X

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"; if...

CVE-2019-7398

ImageMagick (before 7.0.8-25) contains a memory leak in WriteDIBImage (coders/dib.c). The provided connected advisories confirm CVE-2019-7398 and indicate the issue is a memory leak, not an exploitable condition described here. Remediation: update ImageMagick to 7.0.8-25 or newer to fix the vulne...