Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attack. The attack exists due to the way certain Exif tags with a large components count are handled, allowing an attacker to pass a malicious image file causing an invalid memory access and crash...

Solaris 10 (x86) : 136883-09

SunOS 5.10x86: ImageMagick patch. Date this patch was last updated by Sun : Jan/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid121181; scriptversion"1.2"; scriptcvsdate"Date:...

Solaris 10 (sparc) : 136882-09

SunOS 5.10: ImageMagick patch. Date this patch was last updated by Sun : Jan/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid121175; scriptversion"1.2"; scriptcvsdate"Date:...

imagemagick/ping_mvg_fuzzer: Crash in RelinquishMagickMemory

Detailed report: https://oss-fuzz.com/testcase?key=5762201575489536 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff9 Crash State:...

imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob

Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

[SECURITY] Fedora 29 Update: php-horde-Horde-Image-2.5.4-1.fc29

An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...

[SECURITY] Fedora 28 Update: php-horde-Horde-Image-2.5.4-1.fc28

An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...

Fedora 28 : php-horde-Horde-Image (2019-944ff52ce6)

HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...

Fedora 29 : php-horde-Horde-Image (2019-89c1abeac9)

HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...

PT-2019-5492 · Graphicsmagick +6 · Graphicsmagick +6

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-25 GraphicsMagick versions prior to 1.3.32 Description: The issue is related to memory management errors in the WritePDFImage function of graphic editors ImageMagick and GraphicsMagick. Exploitation of this...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

MGASA-2019-0006 Updated imagemagick packages fix security vulnerabilities & bugs

Imagemagick has been updated to fix several bugs and security issues...

Updated imagemagick packages fix security vulnerabilities & bugs

Imagemagick has been updated to fix several bugs and security issues...

Fedora 28 : 1:ImageMagick / libpaper / rubygem-rmagick (2018-3b518bd80f)

Fixing leaking descriptor libpaper - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts credit to OSS Fuzz. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2977-1)

This update for ImageMagick fixes the following security issues : CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2562-1)

This update for ImageMagick fixes the following issues : Security issue fixed : Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml bsc1105592 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2475-1)

This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2018-14434: A memory leak for a colormap in WriteMPCImage incoders/mpc.c was fixed. bsc1102003 - CVE-2018-14435: A memory leak in DecodeImage in coders/pcd.c was fixed. bsc1102007 - CVE-2018-14436: A memory leak...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:3072-1)

This update for ImageMagick fixes the following issues : Allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading these filetypes only by default security policy bsc1105592 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:3753-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 CVE-2018-18016: Fixed a memory...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...