rpm package
suse/ImageMagick&distro=SUSE Linux Enterprise Server 11 SP4
pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4
Vulnerabilities (332)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-12434 | Med | 6.5 | < 6.4.3.6-7.78.22.1 | 6.4.3.6-7.78.22.1 | Aug 4, 2017 | In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c. | |
| CVE-2017-12432 | Med | 6.5 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Aug 4, 2017 | In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service. | |
| CVE-2017-12430 | Hig | 7.5 | < 6.4.3.6-7.78.22.1 | 6.4.3.6-7.78.22.1 | Aug 4, 2017 | In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service. | |
| CVE-2017-12429 | Hig | 7.5 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Aug 4, 2017 | In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service. | |
| CVE-2017-12427 | Med | 6.5 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Aug 4, 2017 | The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function. | |
| CVE-2017-12418 | Hig | 7.5 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Aug 4, 2017 | ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c. | |
| CVE-2017-12140 | Med | 6.5 | < 6.4.3.6-7.78.14.1 | 6.4.3.6-7.78.14.1 | Aug 2, 2017 | The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file. | |
| CVE-2017-11752 | Med | 6.5 | < 6.4.3.6-7.78.14.1 | 6.4.3.6-7.78.14.1 | Jul 30, 2017 | The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-11751 | Med | 6.5 | < 6.4.3.6-7.78.22.1 | 6.4.3.6-7.78.22.1 | Jul 30, 2017 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-11750 | Med | 6.5 | < 6.4.3.6-7.78.29.2 | 6.4.3.6-7.78.29.2 | Jul 30, 2017 | The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-11724 | Med | 6.5 | < 6.4.3.6-7.78.22.1 | 6.4.3.6-7.78.22.1 | Jul 29, 2017 | The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures. | |
| CVE-2017-11644 | Med | 6.5 | < 6.4.3.6-7.78.22.1 | 6.4.3.6-7.78.22.1 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c. | |
| CVE-2017-11642 | Hig | 8.8 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Jul 26, 2017 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638. | |
| CVE-2017-11640 | Med | 6.5 | < 6.4.3.6-7.78.14.1 | 6.4.3.6-7.78.14.1 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. | |
| CVE-2017-11639 | Med | 6.5 | < 6.4.3.6-7.78.29.2 | 6.4.3.6-7.78.29.2 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h. | |
| CVE-2017-11638 | Hig | 8.8 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Jul 26, 2017 | GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642. | |
| CVE-2017-11637 | Cri | 9.8 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Jul 26, 2017 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images. | |
| CVE-2017-11539 | Med | 6.5 | < 6.4.3.6-7.78.29.2 | 6.4.3.6-7.78.29.2 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c. | |
| CVE-2017-11537 | Med | 6.5 | < 6.4.3.6-7.78.34.1 | 6.4.3.6-7.78.34.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation. | |
| CVE-2017-11535 | Med | 6.5 | < 6.4.3.6-7.78.14.1 | 6.4.3.6-7.78.14.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. |
- affected < 6.4.3.6-7.78.22.1fixed 6.4.3.6-7.78.22.1
In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.
- affected < 6.4.3.6-7.78.22.1fixed 6.4.3.6-7.78.22.1
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
- affected < 6.4.3.6-7.78.14.1fixed 6.4.3.6-7.78.14.1
The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
- affected < 6.4.3.6-7.78.14.1fixed 6.4.3.6-7.78.14.1
The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.4.3.6-7.78.22.1fixed 6.4.3.6-7.78.22.1
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.4.3.6-7.78.29.2fixed 6.4.3.6-7.78.29.2
The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 6.4.3.6-7.78.22.1fixed 6.4.3.6-7.78.22.1
The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.
- affected < 6.4.3.6-7.78.22.1fixed 6.4.3.6-7.78.22.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638.
- affected < 6.4.3.6-7.78.14.1fixed 6.4.3.6-7.78.14.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
- affected < 6.4.3.6-7.78.29.2fixed 6.4.3.6-7.78.29.2
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images.
- affected < 6.4.3.6-7.78.29.2fixed 6.4.3.6-7.78.29.2
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.
- affected < 6.4.3.6-7.78.34.1fixed 6.4.3.6-7.78.34.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
- affected < 6.4.3.6-7.78.14.1fixed 6.4.3.6-7.78.14.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
Page 8 of 17