CVE-2017-12432
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de imagemagick · Page n° 10
Vulnérabilité publiée pour imagemagick au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 341
CVE-2017-12431
In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-12430
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-12429
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-12418
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-12140
The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourimagemagick regression
USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a regression for certain users when processing images. The problematic patch has been reverted pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.9
Publication Mise à jourCVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-11639
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2016-7539
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2017-11537
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-11535
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-11533
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.11
Publication Mise à jourCVE-2017-11530
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11529
The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11528
The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11526
The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11525
The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jourCVE-2017-11524
The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.8
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.