CVE-2017-6498
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.6
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de imagemagick · Page n° 15
Vulnérabilité publiée pour imagemagick au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 321
CVE-2016-10070
Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10066
Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10065
The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10061
The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10071
coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10069
coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10068
The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10067
magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10064
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10063
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-10062
The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.5
Publication Mise à jourCVE-2016-9559
coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2015-8903
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.2
Publication Mise à jourCVE-2015-8902
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.2
Publication Mise à jourCVE-2015-8901
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.2
Publication Mise à jourCVE-2015-8900
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.2
Publication Mise à jourimagemagick regression
USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes introduced a regression with text labels and a regression with the text coder. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.4
Publication Mise à jourCVE-2016-8677
The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jourCVE-2016-8862
The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
- Mettez à jour vers 8:6.7.7.10-6ubuntu3.3
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.