This update for ImageMagick fixes the following issues :

CVE-2017-14997: ImageMagick allowed remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. (bsc#1112399)

CVE-2018-16644: A regression in the security fix for the pict coder was fixed (bsc#1107609)

CVE-2017-11532: When ImageMagick processed a crafted file in convert, it could lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c. (bsc#1050129)

CVE-2017-11639: A regression in the security fix in the cip coder was fixed (bsc#1050635)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following security issues :

  - CVE-2017-11532: Prevent a memory leak vulnerability in     the WriteMPCImage() function in coders/mpc.c via a     crafted file allowing for DoS (bsc#1050129)

  - CVE-2018-16750: Prevent memory leak in the     formatIPTCfromBuffer function (bsc#1108283)

  - CVE-2018-16749: Added missing NULL check in     ReadOneJNGImage that allowed an attacker to cause a     denial of service (WriteBlob assertion failure and     application exit) via a crafted file (bsc#1108282)

  - CVE-2018-16642: The function InsertRow allowed remote     attackers to cause a denial of service via a crafted     image file due to an out-of-bounds write (bsc#1107616)

  - CVE-2018-16640: Prevent memory leak in the function     ReadOneJNGImage (bsc#1107619)

  - CVE-2018-16643: The functions ReadDCMImage,     ReadPWPImage, ReadCALSImage, and ReadPICTImage did check     the return value of the fputc function, which allowed     remote attackers to cause a denial of service via a     crafted image file (bsc#1107612)

  - CVE-2018-16644: Added missing check for length in the     functions ReadDCMImage and ReadPICTImage, which allowed     remote attackers to cause a denial of service via a     crafted image (bsc#1107609)

  - CVE-2018-16645: Prevent excessive memory allocation     issue in the functions ReadBMPImage and ReadDIBImage,     which allowed remote attackers to cause a denial of     service via a crafted image file (bsc#1107604)

  - CVE-2018-16413: Prevent heap-based buffer over-read in     the PushShortPixel function leading to DoS (bsc#1106989)

This update also relaxes the restrictions of use of Postscript like formats to 'write' only. (bsc#1105592)

This update was imported from the SUSE:SLE-12:Update update project.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4034-1 advisory.

    It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or     automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could     exploit this to cause a denial of service or possibly execute code with the privileges of the user     invoking the program.

    Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick     safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables     support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by     using an alternate ImageMagick policy configuration.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ImageMagick fixes the following security issues :

  - CVE-2018-16413: Prevent heap-based buffer over-read in     the PushShortPixel function leading to DoS (bsc#1106989)

  - CVE-2018-16329: Prevent NULL pointer dereference in the     GetMagickProperty function leading to DoS (bsc#1106858).

  - CVE-2018-16328: Prevent NULL pointer dereference exists     in the CheckEventLogging function leading to DoS     (bsc#1106857).

  - CVE-2018-16323: ReadXBMImage left data uninitialized     when processing an XBM file that has a negative pixel     value. If the affected code was used as a library loaded     into a process that includes sensitive information, that     information sometimes can be leaked via the image data     (bsc#1106855)

  - CVE-2018-16642: The function InsertRow allowed remote     attackers to cause a denial of service via a crafted     image file due to an out-of-bounds write (bsc#1107616)

  - CVE-2018-16640: Prevent memory leak in the function     ReadOneJNGImage (bsc#1107619)

  - CVE-2018-16641: Prevent memory leak in the     TIFFWritePhotoshopLayers function (bsc#1107618).

  - CVE-2018-16643: The functions ReadDCMImage,     ReadPWPImage, ReadCALSImage, and ReadPICTImage did check     the return value of the fputc function, which allowed     remote attackers to cause a denial of service via a     crafted image file (bsc#1107612)

  - CVE-2018-16644: Added missing check for length in the     functions ReadDCMImage and ReadPICTImage, which allowed     remote attackers to cause a denial of service via a     crafted image (bsc#1107609)

  - CVE-2018-16645: Prevent excessive memory allocation     issue in the functions ReadBMPImage and ReadDIBImage,     which allowed remote attackers to cause a denial of     service via a crafted image file (bsc#1107604)

This update was imported from the SUSE:SLE-15:Update update project.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
119041	SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:3808-1)	Nessus	SuSE Local Security Checks	2018/11/20	2024/7/22	medium
118192	openSUSE Security Update : ImageMagick (openSUSE-2018-1181)	Nessus	SuSE Local Security Checks	2018/10/18	2024/7/30	high
126254	Ubuntu 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-4034-1)	Nessus	Ubuntu Local Security Checks	2019/6/26	2024/8/27	high
117975	openSUSE Security Update : ImageMagick (openSUSE-2018-1108)	Nessus	SuSE Local Security Checks	2018/10/9	2024/7/31	critical

検出

プラグインの検索

medium

high

high

critical