rpm package
suse/ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2
pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2
Vulnerabilities (230)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-9501 | Med | 6.5 | < 6.8.8.1-71.5.3 | 6.8.8.1-71.5.3 | Jun 7, 2017 | In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file. | |
| CVE-2017-9500 | Med | 6.5 | < 6.8.8.1-71.47.1 | 6.8.8.1-71.47.1 | Jun 7, 2017 | In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file. | |
| CVE-2017-9440 | Med | 6.5 | < 6.8.8.1-71.5.3 | 6.8.8.1-71.5.3 | Jun 5, 2017 | In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file. | |
| CVE-2017-9439 | Med | 6.5 | < 6.8.8.1-71.5.3 | 6.8.8.1-71.5.3 | Jun 5, 2017 | In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file. | |
| CVE-2017-9409 | Med | 6.5 | < 6.8.8.1-71.23.1 | 6.8.8.1-71.23.1 | Jun 2, 2017 | In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-9407 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jun 2, 2017 | In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-9405 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jun 2, 2017 | In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-9262 | Med | 6.5 | < 6.8.8.1-71.33.1 | 6.8.8.1-71.33.1 | May 29, 2017 | In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-9261 | Med | 6.5 | < 6.8.8.1-71.33.1 | 6.8.8.1-71.33.1 | May 29, 2017 | In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-9144 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 22, 2017 | In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. | |
| CVE-2017-9143 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 22, 2017 | In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file. | |
| CVE-2017-9142 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 22, 2017 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c. | |
| CVE-2017-9141 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 22, 2017 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c. | |
| CVE-2017-9098 | Hig | 7.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 19, 2017 | ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that | |
| CVE-2017-8830 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 8, 2017 | In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-8765 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | May 4, 2017 | The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file. | |
| CVE-2017-8357 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-8356 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-8355 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-8354 | Med | 6.5 | < 6.8.8.1-70.1 | 6.8.8.1-70.1 | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file. |
- affected < 6.8.8.1-71.5.3fixed 6.8.8.1-71.5.3
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
- affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1
In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.
- affected < 6.8.8.1-71.5.3fixed 6.8.8.1-71.5.3
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.
- affected < 6.8.8.1-71.5.3fixed 6.8.8.1-71.5.3
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.
- affected < 6.8.8.1-71.23.1fixed 6.8.8.1-71.23.1
In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1
In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1
In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-70.1fixed 6.8.8.1-70.1
In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Page 9 of 12