p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de imagemagick · Página 7

Vulnerabilidades publicadas para imagemagick en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 341

  1. CVE-2017-14989

    Media · CVSS 6.5EPSS 1,45%Corrección disponible

    CVE-2017-14989

    A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  2. CVE-2017-14739

    Alta · CVSS 7.5EPSS 3,01%Corrección disponible

    CVE-2017-14739

    The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  3. CVE-2017-14684

    Media · CVSS 6.5EPSS 1,17%Corrección disponible

    CVE-2017-14684

    In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  4. CVE-2017-14682

    Alta · CVSS 8.8EPSS 2,29%Corrección disponible

    CVE-2017-14682

    GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  5. CVE-2017-14607

    Alta · CVSS 8.1EPSS 2,33%Corrección disponible

    CVE-2017-14607

    In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  6. CVE-2017-14505

    Media · CVSS 6.5EPSS 1,49%Corrección disponible

    CVE-2017-14505

    DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización
  7. CVE-2017-14400

    Media · CVSS 6.5EPSS 2,16%Corrección disponible

    CVE-2017-14400

    In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file.

    • Actualiza a 8:6.8.9.9-7ubuntu5.11
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →