CVE-2017-11531
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.
- Mettez à jour vers 8:6.9.7.4+dfsg-13
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de imagemagick · Page n° 31
Vulnérabilités publiées pour imagemagick au cours des 30 derniers jours : 84. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 866
CVE-2017-11530
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11529
The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11528
The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11526
The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11525
The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11524
The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11523
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
- Mettez à jour vers 8:6.9.7.4+dfsg-14
Publication Mise à jourCVE-2017-11505
The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11478
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11450
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11448
The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11447
The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11446
The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.
- Mettez à jour vers 8:6.9.7.4+dfsg-13
Publication Mise à jourCVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11188
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jourCVE-2017-11170
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.
- Mettez à jour vers 8:6.9.7.4+dfsg-12
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.