DLA-1381-1 imagemagick - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1381-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

CVE-2017-18273

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted image file that is mishandled in a GetImageIndexInList call...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

CVE-2017-18271

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted MIFF image file...

imagemagick/ping_wpg_fuzzer: Index-out-of-bounds in LibRaw::parse_fuji

Detailed report: https://oss-fuzz.com/testcase?key=5432317716725760 Project: imagemagick Fuzzer: libFuzzerimagemagickpingwpgfuzzer Fuzz target binary: pingwpgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsefuji...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_tiff_ifd

Detailed report: https://oss-fuzz.com/testcase?key=4698486590144512 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePath

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5707942736166912 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Crash in TracePath

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5349958956875776 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Heap-use-after-free in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5550962654576640 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Denial Of Service (DoS)

ImageMagick is susceptible to denial of service DoS. It allows a malicious user to crash the application by passing a malicious SUN file to the ReadSUNImage in coders/sun.c, causing a heap-buffer-overflow in SetGrayscaleImage...

Denial Of Service (DoS) Through CPU Consumption

ImageMagick is susceptible to denial of service DoS through CPU consumption. A malicious user can crash the application by passing a malicious MIFF file to the ReadMIFFImage in coders/miff.c, causing huge CPU consumption...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attack. Sending a malicious image file to the ReadTXTImage function in coders/txt.c leads to a huge CPU consumption...

ImageMagick Heap Buffer Over Read Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer over-read vulnerability exists in ReadSUNImage in coders/sun.c in ImageMagick 7.0.7-23 Q16 x8664 2018-01-24. An attacker can exploit this vulnerability t...

ImageMagick Memory Misreference Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in ReadOneMNGImage in coders/png.c in ImageMagick 7.0.7-16 Q16 x8664 2017-12-25. An attacker can exploit this vulnerability ...

Debian DSA-4204-1 : imagemagick - security update

This update fixes several vulnerabilities in imagemagick, a graphical software suite. Various memory handling problems or issues about incomplete input sanitizing would result in denial of service or memory disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in th...

ImageMagick infinite loop vulnerability (CNVD-2018-12308)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. An infinite loop vulnerability exists in ReadMIFFImage in coders/miff.c in ImageMagick 7.0.7-16 Q16 x8664 2017-12-22. An attacker can exploit this vulnerability to cau...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6224172706430976 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::median4

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4802636141297664 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...