suse/ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2

Vulnerabilities (230)

• CVE-2017-17884MedDec 27, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.

• CVE-2017-17882MedDec 27, 2017
  affected < 6.8.8.1-71.23.1fixed 6.8.8.1-71.23.1

  In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.

• CVE-2017-17881MedDec 27, 2017
  affected < 6.8.8.1-71.26.1fixed 6.8.8.1-71.26.1

  In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.

• CVE-2017-17879HigDec 27, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

• CVE-2017-17682MedDec 14, 2017
  affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1

  In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

• CVE-2017-17681MedDec 14, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.

• CVE-2017-17680MedDec 14, 2017
  affected < 6.8.8.1-71.23.1fixed 6.8.8.1-71.23.1

  In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.

• CVE-2017-17504MedDec 11, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.

• CVE-2017-16669HigNov 9, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c.

• CVE-2017-16546HigNov 5, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other

• CVE-2017-16545HigNov 5, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have unspecified other impact via

• CVE-2017-16353MedNov 1, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containing the vulnerability is responsible for printing the I

• CVE-2017-16352HigNov 1, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a

• CVE-2017-15930HigOct 27, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer.

• CVE-2017-15281HigOct 12, 2017
  affected < 6.8.8.1-71.20.1fixed 6.8.8.1-71.20.1

  ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."

• CVE-2017-15277MedOct 12, 2017
  affected < 6.8.8.1-71.20.1fixed 6.8.8.1-71.20.1

  ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting d

• CVE-2017-15218MedOct 10, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.

• CVE-2017-15217MedOct 10, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.

• CVE-2017-15033HigOct 5, 2017
  affected < 6.8.8.1-71.12.1fixed 6.8.8.1-71.12.1

  ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.

• CVE-2017-15017HigOct 5, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.