USN-4034-1: ImageMagick vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:3348-1)

This update for ImageMagick fixes the following security issue : CVE-2017-17934: Prevent memory leaks, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls bsc1074170. CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283...

SUSE-SU-2018:3269-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following security issue: - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283 - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was use...

openSUSE Security Update : ImageMagick (openSUSE-2018-1197)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 -...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3191-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069...

CVE-2018-17965

ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c...

CVE-2018-17965

CVE-2018-17965 affects ImageMagick 7.0.7-28, with a memory leak in WriteSGIImage (coders/sgi.c). The connected records confirm this CVE is included in multiple vendor advisories (Ubuntu USN-4034-1, SUSE/openSUSE updates) and is addressed within those ImageMagick mitigations. The exact patched ver...