This update for ImageMagick fixes the following issues :

Security issues fixed :

CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
(bsc#1111069)

CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).

CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747).

CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).

CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098545)

CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098546)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3191-1)

high Nessus Plugin ID 118198

Version 1.5