[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256148

 
 

909

 
 

199106

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2018:1129-1 -- SLES libMagick

ID: oval:org.secpod.oval:def:89002546Date: (C)2021-02-26   (M)2024-05-23
Class: PATCHFamily: unix




This update for ImageMagick fixes the following issues: - security update * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. Attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. [bsc#1086773] * CVE-2018-10177: there is an infinite loop in the ReadOneMNGImagefunction of the coders/png.c file. Remote attackers could leverage thisvulnerability to cause a denial of service - security update * CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow attackers to cause a denial of service via a crafted file. [bsc#1087033] - security update * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027] - security update * CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c could allow attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356] - security update * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which could lead to a denial of service via a crafted file. [bsc#1087037] - security update * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027] - security update * CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in ImageMagick memory allocation issue could lead to denial of service

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
libMagick
Reference:
SUSE-SU-2018:1129-1
CVE-2017-1000476
CVE-2017-10928
CVE-2017-18251
CVE-2017-18252
CVE-2017-18254
CVE-2018-10177
CVE-2018-8960
CVE-2018-9018
CVE    8
CVE-2017-18251
CVE-2017-18252
CVE-2017-1000476
CVE-2017-18254
...
CPE    2
cpe:/a:imagemagick:libMagick
cpe:/o:suse:suse_linux_enterprise_server:11:sp4

© SecPod Technologies