This update for ImageMagick fixes several issues.

These security issues were fixed :

  - CVE-2018-8804: The WriteEPTImage function allowed remote     attackers to cause a denial of service (double free and     application crash) or possibly have unspecified other     impact via a crafted file (bsc#1086011).

  - CVE-2017-11524: The WriteBlob function allowed remote     attackers to cause a denial of service (assertion     failure and application exit) via a crafted file     (bsc#1050087).

  - CVE-2017-18209: Prevent NULL pointer dereference in the     GetOpenCLCachedFilesDirectory function caused by a     memory allocation result that was not checked, related     to GetOpenCLCacheDirectory (bsc#1083628).

  - CVE-2017-18211: Prevent NULL pointer dereference in the     function saveBinaryCLProgram caused by a program-lookup     result not being checked, related to CacheOpenCLKernel     (bsc#1083634).

  - CVE-2017-9500: Prevent assertion failure in the function     ResetImageProfileIterator, which allowed attackers to     cause a denial of service via a crafted file     (bsc#1043290).

  - CVE-2017-14739: The AcquireResampleFilterThreadSet     function mishandled failed memory allocation, which     allowed remote attackers to cause a denial of service     (NULL pointer Dereference in DistortImage in     MagickCore/distort.c, and application crash) via     unspecified vectors (bsc#1060382).

  - CVE-2017-16353: Prevent memory information disclosure in     the DescribeImage function caused by a heap-based buffer     over-read. The portion of the code containing the     vulnerability is responsible for printing the IPTC     Profile information contained in the image. This     vulnerability can be triggered with a specially crafted     MIFF file. There is an out-of-bounds buffer dereference     because certain increments were never checked     (bsc#1066170).

  - CVE-2017-16352: Prevent a heap-based buffer overflow in     the 'Display visual image directory' feature of the     DescribeImage() function. One possible way to trigger     the vulnerability is to run the identify command on a     specially crafted MIFF format file with the verbose flag     (bsc#1066168).

  - CVE-2017-14314: Prevent off-by-one error in the     DrawImage function that allowed remote attackers to     cause a denial of service (DrawDashPolygon heap-based     buffer over-read and application crash) via a crafted     file (bsc#1058630).

  - CVE-2017-13768: Prevent NULL pointer dereference in the     IdentifyImage function that allowed an attacker to     perform denial of service by sending a crafted image     file (bsc#1056434).

  - CVE-2017-14505: Fixed handling of NULL arrays, which     allowed attackers to perform Denial of Service (NULL     pointer dereference and application crash in     AcquireQuantumMemory within MagickCore/memory.c) by     providing a crafted Image File as input (bsc#1059735).

  - CVE-2018-7470: The IsWEBPImageLossless function allowed     attackers to cause a denial of service (segmentation     violation) via a crafted file (bsc#1082837).

  - CVE-2018-7443: The ReadTIFFImage function did not     properly validate the amount of image data in a file,     which allowed remote attackers to cause a denial of     service (memory allocation failure in the     AcquireMagickMemory function in MagickCore/memory.c)     (bsc#1082792).

  - CVE-2017-15016: Prevent NULL pointer dereference     vulnerability in ReadEnhMetaFile allowing for denial of     service (bsc#1082291).

  - CVE-2017-15017: Prevent NULL pointer dereference     vulnerability in ReadOneMNGImage allowing for denial of     service (bsc#1082283).

  - CVE-2017-12692: The ReadVIFFImage function allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted VIFF file (bsc#1082362).

  - CVE-2017-12693: The ReadBMPImage function allowed remote     attackers to cause a denial of service (memory     consumption) via a crafted BMP file (bsc#1082348). This     update was imported from the SUSE:SLE-12:Update update     project.

This update for GraphicsMagick fixes the following issue :

  - CVE-2017-11524: An attacker could have used a crafted     file to cause a denial of service (assertion failure and     application exit) (bsc#1050087)

This update for ImageMagick fixes several issues. These security issues were fixed :

  - CVE-2018-8804: The WriteEPTImage function allowed remote     attackers to cause a denial of service (double free and     application crash) or possibly have unspecified other     impact via a crafted file (bsc#1086011).

  - CVE-2017-11524: The WriteBlob function allowed remote     attackers to cause a denial of service (assertion     failure and application exit) via a crafted file     (bsc#1050087).

  - CVE-2017-18209: Prevent NULL pointer dereference in the     GetOpenCLCachedFilesDirectory function caused by a     memory allocation result that was not checked, related     to GetOpenCLCacheDirectory (bsc#1083628).

  - CVE-2017-18211: Prevent NULL pointer dereference in the     function saveBinaryCLProgram caused by a program-lookup     result not being checked, related to CacheOpenCLKernel     (bsc#1083634).

  - CVE-2017-9500: Prevent assertion failure in the function     ResetImageProfileIterator, which allowed attackers to     cause a denial of service via a crafted file     (bsc#1043290).

  - CVE-2017-14739: The AcquireResampleFilterThreadSet     function mishandled failed memory allocation, which     allowed remote attackers to cause a denial of service     (NULL pointer Dereference in DistortImage in     MagickCore/distort.c, and application crash) via     unspecified vectors (bsc#1060382).

  - CVE-2017-16353: Prevent memory information disclosure in     the DescribeImage function caused by a heap-based buffer     over-read. The portion of the code containing the     vulnerability is responsible for printing the IPTC     Profile information contained in the image. This     vulnerability can be triggered with a specially crafted     MIFF file. There is an out-of-bounds buffer dereference     because certain increments were never checked     (bsc#1066170).

  - CVE-2017-16352: Prevent a heap-based buffer overflow in     the 'Display visual image directory' feature of the     DescribeImage() function. One possible way to trigger     the vulnerability is to run the identify command on a     specially crafted MIFF format file with the verbose flag     (bsc#1066168).

  - CVE-2017-14314: Prevent off-by-one error in the     DrawImage function that allowed remote attackers to     cause a denial of service (DrawDashPolygon heap-based     buffer over-read and application crash) via a crafted     file (bsc#1058630).

  - CVE-2017-13768: Prevent NULL pointer dereference in the     IdentifyImage function that allowed an attacker to     perform denial of service by sending a crafted image     file (bsc#1056434).

  - CVE-2017-14505: Fixed handling of NULL arrays, which     allowed attackers to perform Denial of Service (NULL     pointer dereference and application crash in     AcquireQuantumMemory within MagickCore/memory.c) by     providing a crafted Image File as input (bsc#1059735).

  - CVE-2018-7470: The IsWEBPImageLossless function allowed     attackers to cause a denial of service (segmentation     violation) via a crafted file (bsc#1082837).

  - CVE-2018-7443: The ReadTIFFImage function did not     properly validate the amount of image data in a file,     which allowed remote attackers to cause a denial of     service (memory allocation failure in the     AcquireMagickMemory function in MagickCore/memory.c)     (bsc#1082792).

  - CVE-2017-15016: Prevent NULL pointer dereference     vulnerability in ReadEnhMetaFile allowing for denial of     service (bsc#1082291).

  - CVE-2017-15017: Prevent NULL pointer dereference     vulnerability in ReadOneMNGImage allowing for denial of     service (bsc#1082283).

  - CVE-2017-12692: The ReadVIFFImage function allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted VIFF file (bsc#1082362).

  - CVE-2017-12693: The ReadBMPImage function allowed remote     attackers to cause a denial of service (memory     consumption) via a crafted BMP file (bsc#1082348).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This updates fixes numerous vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed DPX, RLE, CIN, DIB, EPT, MAT, VST, PNG, JNG, MNG, DVJU, JPEG, TXT, PES, MPC, UIL, PS, PALM, CIP, TIFF, ICON, MAGICK, DCM, MSL, WMF, MIFF, PCX, SUN, PSD, MVG, PWP, PICT, PDB, SFW, or XCF files are processed.

For Debian 7 'Wheezy', these problems have been fixed in version 6.7.7.10-5+deb7u16.

We recommend that you upgrade your imagemagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows     remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.
    (CVE-2017-11524)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for ImageMagick fixes several issues. These security issues were fixed :

  - CVE-2018-8804: The WriteEPTImage function allowed remote     attackers to cause a denial of service (double free and     application crash) or possibly have unspecified other     impact via a crafted file (bsc#1086011)

  - CVE-2017-11524: The WriteBlob function allowed remote     attackers to cause a denial of service (assertion     failure and application exit) via a crafted file     (bsc#1050087)

  - CVE-2017-18219: Prevent allocation failure in the     function ReadOnePNGImage, which allowed attackers to     cause a denial of service via a crafted file that     triggers an attempt at a large png_pixels array     allocation (bsc#1084060).

  - CVE-2017-9500: Prevent assertion failure in the function     ResetImageProfileIterator, which allowed attackers to     cause a denial of service via a crafted file     (bsc#1043290)

  - CVE-2017-16353: Prevent memory information disclosure in     the DescribeImage function caused by a heap-based buffer     over-read. The portion of the code containing the     vulnerability is responsible for printing the IPTC     Profile information contained in the image. This     vulnerability can be triggered with a specially crafted     MIFF file. There is an out-of-bounds buffer dereference     because certain increments were never checked     (bsc#1066170)

  - CVE-2017-16352: Prevent a heap-based buffer overflow in     the 'Display visual image directory' feature of the     DescribeImage() function. One possible way to trigger     the vulnerability is to run the identify command on a     specially crafted MIFF format file with the verbose flag     (bsc#1066168)

  - CVE-2017-14314: Prevent off-by-one error in the     DrawImage function that allowed remote attackers to     cause a denial of service (DrawDashPolygon heap-based     buffer over-read and application crash) via a crafted     file (bsc#1058630)

  - CVE-2017-13768: Prevent NULL pointer dereference in the     IdentifyImage function that allowed an attacker to     perform denial of service by sending a crafted image     file (bsc#1056434)

  - CVE-2017-14505: Fixed handling of NULL arrays, which     allowed attackers to perform Denial of Service (NULL     pointer dereference and application crash in     AcquireQuantumMemory within MagickCore/memory.c) by     providing a crafted Image File as input (bsc#1059735)

  - CVE-2018-7443: The ReadTIFFImage function did not     properly validate the amount of image data in a file,     which allowed remote attackers to cause a denial of     service (memory allocation failure in the     AcquireMagickMemory function in MagickCore/memory.c)     (bsc#1082792)

  - CVE-2017-15016: Prevent NULL pointer dereference     vulnerability in ReadEnhMetaFile allowing for denial of     service (bsc#1082291)

  - CVE-2017-15017: Prevent NULL pointer dereference     vulnerability in ReadOneMNGImage allowing for denial of     service (bsc#1082283)

  - CVE-2017-12692: The ReadVIFFImage function allowed     remote attackers to cause a denial of service (memory     consumption) via a crafted VIFF file (bsc#1082362)

  - CVE-2017-12693: The ReadBMPImage function allowed remote     attackers to cause a denial of service (memory     consumption) via a crafted BMP file (bsc#1082348)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	4/15/2020	2/9/2021	critical
108935	openSUSE Security Update : ImageMagick (openSUSE-2018-343)	Nessus	SuSE Local Security Checks	4/10/2018	11/12/2024	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	12/10/2019	2/9/2021	critical
108936	openSUSE Security Update : GraphicsMagick (openSUSE-2018-344)	Nessus	SuSE Local Security Checks	4/10/2018	11/12/2024	medium
108824	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0857-1)	Nessus	SuSE Local Security Checks	4/4/2018	11/21/2024	critical
102889	Debian DLA-1081-1 : imagemagick security update	Nessus	Debian Local Security Checks	9/1/2017	1/11/2021	critical
220253	Linux Distros Unpatched Vulnerability : CVE-2017-11524	Nessus	Misc.	3/4/2025	3/4/2025	medium
108877	SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0880-1)	Nessus	SuSE Local Security Checks	4/6/2018	11/14/2024	high

Detections

Analytics

Plugins Search

critical

critical

critical

medium

critical

critical

medium

high