リモートホストは、GLSA-201711-07（ImageMagick：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がImageMagickで発見されています。詳細については、記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、ユーザーを誘導して特別に細工されたファイルを処理させることで、機密情報を取得したり、サービス拒否状態を引き起こしたり、他の不特定の影響を与えたりする可能性があります。回避策：現時点では、既知の回避策はありません。

This update for ImageMagick fixes the following issues :

  - CVE-2017-9405: A memory leak in the ReadICONImage     function was fixed that could lead to DoS via memory     exhaustion (bsc#1042911)

  - CVE-2017-9407: In ImageMagick, the ReadPALMImage     function in palm.c allowed attackers to cause a denial     of service (memory leak) via a crafted file.
    (bsc#1042824)

  - CVE-2017-11166: In ReadXWDImage in coders\xwd.c a     memoryleak could have caused memory exhaustion via a     crafted length (bsc#1048110)

  - CVE-2017-11170: ReadTGAImage in coders\tga.c allowed for     memory exhaustion via invalid colors data in the header     of a TGA or VST file (bsc#1048272)

  - CVE-2017-11448: The ReadJPEGImage function in     coders/jpeg.c in ImageMagick allowed remote attackers to     obtain sensitive information from uninitialized memory     locations via a crafted file. (bsc#1049375)

  - CVE-2017-11450: A remote denial of service in     coders/jpeg.c was fixed (bsc#1049374)

  - CVE-2017-11528: ReadDIBImage in coders/dib.c allows     remote attackers to cause DoS via memory exhaustion     (bsc#1050119)

  - CVE-2017-11530: ReadEPTImage in coders/ept.c allows     remote attackers to cause DoS via memory exhaustion     (bsc#1050122)

  - CVE-2017-11531: When ImageMagick processed a crafted     file in convert, it could lead to a Memory Leak in the     WriteHISTOGRAMImage() function in coders/histogram.c.
    (bsc#1050126)

  - CVE-2017-11533: A information leak by 1 byte due to     heap-based buffer over-read in the WriteUILImage() in     coders/uil.c was fixed (bsc#1050132)

  - CVE-2017-11537: When ImageMagick processed a crafted     file in convert, it can lead to a Floating Point     Exception (FPE) in the WritePALMImage() function in     coders/palm.c, related to an incorrect bits-per-pixel     calculation. (bsc#1050048)

  - CVE-2017-11638, CVE-2017-11642: A NULL pointer     dereference in theWriteMAPImage() in coders/map.c was     fixed which could lead to a crash (bsc#1050617)

  - CVE-2017-12418: ImageMagick had memory leaks in the     parse8BIMW and format8BIM functions in coders/meta.c,     related to the WriteImage function in     MagickCore/constitute.c. (bsc#1052207)

  - CVE-2017-12427: ProcessMSLScript coders/msl.c allowed     remote attackers to cause a DoS (bsc#1052248)

  - CVE-2017-12429: A memory exhaustion flaw in     ReadMIFFImage in coders/miff.c was fixed, which allowed     attackers to cause DoS (bsc#1052251)

  - CVE-2017-12432: In ImageMagick, a memory exhaustion     vulnerability was found in the function ReadPCXImage in     coders/pcx.c, which allowed attackers to cause a denial     of service. (bsc#1052254)

  - CVE-2017-12566: A memory leak in ReadMVGImage in     coders/mvg.c, could have allowed attackers to cause DoS     (bsc#1052472)

  - CVE-2017-12654: The ReadPICTImage function in     coders/pict.c in ImageMagick allowed attackers to cause     a denial of service (memory leak) via a crafted file.
    (bsc#1052761)

  - CVE-2017-12663: A memory leak in WriteMAPImage in     coders/map.c was fixed that could lead to a DoS via     memory exhaustion (bsc#1052754)

  - CVE-2017-12664: ImageMagick had a memory leak     vulnerability in WritePALMImage in coders/palm.c.
    (bsc#1052750)

  - CVE-2017-12665: ImageMagick had a memory leak     vulnerability in WritePICTImage in coders/pict.c.
    (bsc#1052747)

  - CVE-2017-12668: ImageMagick had a memory leak     vulnerability in WritePCXImage in coders/pcx.c.
    (bsc#1052688)

  - CVE-2017-12674: A CPU exhaustion in ReadPDBImage in     coders/pdb.c was fixed, which allowed attackers to cause     DoS (bsc#1052711)

  - CVE-2017-13058: In ImageMagick, a memory leak     vulnerability was found in the function WritePCXImage in     coders/pcx.c, which allowed attackers to cause a denial     of service via a crafted file. (bsc#1055069)

  - CVE-2017-13131: A memory leak vulnerability was found in     thefunction ReadMIFFImage in coders/miff.c, which     allowed attackers tocause a denial of service (memory     consumption in NewL (bsc#1055229)

  - CVE-2017-14060: A NULL pointer Dereference issue in the     ReadCUTImage function in coders/cut.c was fixed that     could have caused a Denial of Service (bsc#1056768)

  - CVE-2017-14139: A memory leak vulnerability in     WriteMSLImage in coders/msl.c was fixed. (bsc#1057163)

  - CVE-2017-14224: A heap-based buffer overflow in     WritePCXImage in coders/pcx.c could lead to denial of     service or code execution. (bsc#1058009)

  - CVE-2017-17682: A large loop vulnerability was fixed in     ExtractPostscript in coders/wpg.c, which allowed     attackers to cause a denial of service (CPU exhaustion)     (bsc#1072898)

  - CVE-2017-17885: In ImageMagick, a memory leak     vulnerability was found in the function ReadPICTImage in     coders/pict.c, which allowed attackers to cause a denial     of service via a crafted PICT image file. (bsc#1074119)

  - CVE-2017-17934: A memory leak in the function     MSLPopImage and ProcessMSLScript could have lead to a     denial of service (bsc#1074170)

  - CVE-2017-18028: A memory exhaustion in the function     ReadTIFFImage in coders/tiff.c was fixed. (bsc#1076182)

  - CVE-2018-5357: ImageMagick had memory leaks in the     ReadDCMImage function in coders/dcm.c. (bsc#1075821)

  - CVE-2018-6405: In the ReadDCMImage function in     coders/dcm.c in ImageMagick, each redmap, greenmap, and     bluemap variable can be overwritten by a new pointer.
    The previous pointer is lost, which leads to a memory     leak. This allowed remote attackers to cause a denial of     service. (bsc#1078433)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

  - CVE-2017-9405: A memory leak in the ReadICONImage     function was fixed that could lead to DoS via memory     exhaustion (bsc#1042911)

  - CVE-2017-9407: In ImageMagick, the ReadPALMImage     function in palm.c allowed attackers to cause a denial     of service (memory leak) via a crafted file.
    (bsc#1042824)

  - CVE-2017-11166: In ReadXWDImage in coders\xwd.c a     memoryleak could have caused memory exhaustion via a     crafted length (bsc#1048110)

  - CVE-2017-11170: ReadTGAImage in coders\tga.c allowed for     memory exhaustion via invalid colors data in the header     of a TGA or VST file (bsc#1048272)

  - CVE-2017-11448: The ReadJPEGImage function in     coders/jpeg.c in ImageMagick allowed remote attackers to     obtain sensitive information from uninitialized memory     locations via a crafted file. (bsc#1049375)

  - CVE-2017-11450: A remote denial of service in     coders/jpeg.c was fixed (bsc#1049374)

  - CVE-2017-11528: ReadDIBImage in coders/dib.c allows     remote attackers to cause DoS via memory exhaustion     (bsc#1050119)

  - CVE-2017-11530: ReadEPTImage in coders/ept.c allows     remote attackers to cause DoS via memory exhaustion     (bsc#1050122)

  - CVE-2017-11531: When ImageMagick processed a crafted     file in convert, it could lead to a Memory Leak in the     WriteHISTOGRAMImage() function in coders/histogram.c.
    (bsc#1050126)

  - CVE-2017-11533: A information leak by 1 byte due to     heap-based buffer over-read in the WriteUILImage() in     coders/uil.c was fixed (bsc#1050132)

  - CVE-2017-11537: When ImageMagick processed a crafted     file in convert, it can lead to a Floating Point     Exception (FPE) in the WritePALMImage() function in     coders/palm.c, related to an incorrect bits-per-pixel     calculation. (bsc#1050048)

  - CVE-2017-11638, CVE-2017-11642: A NULL pointer     dereference in theWriteMAPImage() in coders/map.c was     fixed which could lead to a crash (bsc#1050617)

  - CVE-2017-12418: ImageMagick had memory leaks in the     parse8BIMW and format8BIM functions in coders/meta.c,     related to the WriteImage function in     MagickCore/constitute.c. (bsc#1052207)

  - CVE-2017-12427: ProcessMSLScript coders/msl.c allowed     remote attackers to cause a DoS (bsc#1052248)

  - CVE-2017-12429: A memory exhaustion flaw in     ReadMIFFImage in coders/miff.c was fixed, which allowed     attackers to cause DoS (bsc#1052251)

  - CVE-2017-12432: In ImageMagick, a memory exhaustion     vulnerability was found in the function ReadPCXImage in     coders/pcx.c, which allowed attackers to cause a denial     of service. (bsc#1052254)

  - CVE-2017-12566: A memory leak in ReadMVGImage in     coders/mvg.c, could have allowed attackers to cause DoS     (bsc#1052472)

  - CVE-2017-12654: The ReadPICTImage function in     coders/pict.c in ImageMagick allowed attackers to cause     a denial of service (memory leak) via a crafted file.
    (bsc#1052761)

  - CVE-2017-12663: A memory leak in WriteMAPImage in     coders/map.c was fixed that could lead to a DoS via     memory exhaustion (bsc#1052754)

  - CVE-2017-12664: ImageMagick had a memory leak     vulnerability in WritePALMImage in coders/palm.c.
    (bsc#1052750)

  - CVE-2017-12665: ImageMagick had a memory leak     vulnerability in WritePICTImage in coders/pict.c.
    (bsc#1052747)

  - CVE-2017-12668: ImageMagick had a memory leak     vulnerability in WritePCXImage in coders/pcx.c.
    (bsc#1052688)

  - CVE-2017-12674: A CPU exhaustion in ReadPDBImage in     coders/pdb.c was fixed, which allowed attackers to cause     DoS (bsc#1052711)

  - CVE-2017-13058: In ImageMagick, a memory leak     vulnerability was found in the function WritePCXImage in     coders/pcx.c, which allowed attackers to cause a denial     of service via a crafted file. (bsc#1055069)

  - CVE-2017-13131: A memory leak vulnerability was found in     thefunction ReadMIFFImage in coders/miff.c, which     allowed attackers tocause a denial of service (memory     consumption in NewL (bsc#1055229)

  - CVE-2017-14060: A NULL pointer Dereference issue in the     ReadCUTImage function in coders/cut.c was fixed that     could have caused a Denial of Service (bsc#1056768)

  - CVE-2017-14139: A memory leak vulnerability in     WriteMSLImage in coders/msl.c was fixed. (bsc#1057163)

  - CVE-2017-14224: A heap-based buffer overflow in     WritePCXImage in coders/pcx.c could lead to denial of     service or code execution. (bsc#1058009)

  - CVE-2017-17682: A large loop vulnerability was fixed in     ExtractPostscript in coders/wpg.c, which allowed     attackers to cause a denial of service (CPU exhaustion)     (bsc#1072898)

  - CVE-2017-17885: In ImageMagick, a memory leak     vulnerability was found in the function ReadPICTImage in     coders/pict.c, which allowed attackers to cause a denial     of service via a crafted PICT image file. (bsc#1074119)

  - CVE-2017-17934: A memory leak in the function     MSLPopImage and ProcessMSLScript could have lead to a     denial of service (bsc#1074170)

  - CVE-2017-18028: A memory exhaustion in the function     ReadTIFFImage in coders/tiff.c was fixed. (bsc#1076182)

  - CVE-2018-5357: ImageMagick had memory leaks in the     ReadDCMImage function in coders/dcm.c. (bsc#1075821)

  - CVE-2018-6405: In the ReadDCMImage function in     coders/dcm.c in ImageMagick, each redmap, greenmap, and     bluemap variable can be overwritten by a new pointer.
    The previous pointer is lost, which leads to a memory     leak. This allowed remote attackers to cause a denial of     service. (bsc#1078433)

This update was imported from the SUSE:SLE-12:Update update project.

远程主机受到 GLSA-201711-07 中所述漏洞的影响（ImageMagick：多个漏洞）在 ImageMagick 中发现多个漏洞。如需详细信息，请查看供参考的 CVE 标识符。影响：远程攻击者可引诱用户处理特制文件，进而可取得敏感信息、造成拒绝服务情况或其他不明影响。解决方法：目前无任何已知的解决方法。

遠端主機受到 GLSA-201711-07 中所述的弱點影響 (ImageMagick：多個弱點) 在 ImageMagick 中發現多個弱點。如需詳細資料，請檢閱提及的 CVE 識別碼。影響：遠端攻擊者可引誘使用者處理特製檔案，進而可取得敏感資訊、造成拒絕服務情形或其他不明影響。因應措施：目前尚無已知的因應措施。

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A heap-based buffer overflow in WritePCXImage in     coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote     attackers to cause a denial of service or code     execution via a crafted file.(CVE-2017-14224)

  - GetNextToken in MagickCore/token.c in ImageMagick 7.0.6     allows remote attackers to cause a denial of service     (heap-based buffer overflow and application crash) or     possibly have unspecified other impact via a crafted     SVG document, a different vulnerability than     CVE-2017-10928.(CVE-2017-14682)

  - ImageMagick version 7.0.7-2 contains a memory leak in     ReadYUVImage in coders/yuv.c.(CVE-2017-15033)

  - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference     vulnerability in ReadEnhMetaFile in     coders/emf.c.(CVE-2017-15016)

  - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference     vulnerability in ReadOneMNGImage in     coders/png.c.(CVE-2017-15017)

  - ImageMagick 7.0.6-2 has a memory leak vulnerability in     WriteMSLImage in coders/msl.c.(CVE-2017-14139)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

  - Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier     allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a     large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than     CVE-2014-2030. (CVE-2014-1947)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

このImageMagick用の更新プログラムでは、以下の問題を修正します：

  - CVE-2017-9405：メモリを消費することでDoSを引き起こす可能性のある、ReadICONImage関数のメモリリークが修正されました（bsc#1042911）

  - CVE-2017-9407：ImageMagickでは、palm.cのReadPALMImage関数により、リモートの攻撃者が、細工されたファイルを介して、サービス拒否（メモリリーク）を引き起こすことが可能でした。
    （bsc#1042824）

  - CVE-2017-11166：coders\xwd.caのReadXWDImageでは、メモリリークが細工された長さを介してメモリ枯渇を引き起こしていた可能性があります（bsc#1048110）

  - CVE-2017-11170：coders\tga.cのReadTGAImageにより、TGAまたはVSTファイルのヘッダーの無効なカラーデータを介してメモリ枯渇が発生する可能性がありました（bsc#1048272）

  - CVE-2017-11448：ImageMagickのcoders/jpeg.cにあるReadJPEGImage関数により、リモートの攻撃者が細工されたファイルを介して初期化されていないメモリの場所から秘密情報を取得する可能性があります。（bsc#1049375）

  - CVE-2017-11450：coders/jpeg.cのリモートのサービス拒否が修正されました（bsc#1049374）

  - CVE-2017-11528：coders/dib.cのReadDIBImageにより、リモートの攻撃者がDoSを引き起こすことが可能です（bsc#1050119）

  - CVE-2017-11530：coders/ept.cのReadEPTImageにより、リモートの攻撃者がDoSを引き起こすことが可能です（bsc#1050122）

  - CVE-2017-11531：ImageMagickが細工されたファイルをconvertで処理すると、coders/histgram.cのWriteHISTOGRAMImage()関数でメモリリークが発生する可能性があります。
    （bsc#1050126）

  - CVE-2017-11533：coders/uil.cのWriteUILImage()におけるヒープベースのバッファオーバーリードによる1バイトによる情報漏洩が修正されました（bsc#1050132）

  - CVE-2017-11537：ImageMagickが細工されたファイルをconvertで処理すると、不適切なbits-per-pixel計算に関連するcoders/palm.cのWritePALMImage()関数で、浮動小数点例外（FPE）が発生する可能性があります。（bsc#1050048）

  - CVE-2017-11638、CVE-2017-11642：クラッシュに至る可能性のあった、coders/map.cのtheWriteMAPImage()におけるNULLポインターデリファレンスが修正されました（bsc#1050617）

  - CVE-2017-12418：ImageMagickでは、coders/meta.cのparse8BIMW関数およびformat8BIM関数で、MagickCore/constitute.cのWriteImage関数に関連するメモリリークがありました。（bsc#1052207）

  - CVE-2017-12427：ProcessMSLScript coders/msl.cにより、リモートの攻撃者がDoSを引き起こすことが可能でした（bsc#1052248）

  - CVE-2017-12429：攻撃者がDoSを引き起こすことが可能であった、coders/miff.cのReadMIFFImageにおけるメモリ枯渇の欠陥が修正されました（bsc#1052251）

  - CVE-2017-12432：- ImageMagickでは、coders/pcx.cの関数ReadPCXImageでメモリ枯渇の脆弱性が見つかりました。これにより、攻撃者がサービス拒否を引き起こすことが可能でした。（bsc#1052254）

  - CVE-2017-12566：coders/mvg.cのReadMVGImageにおけるメモリリークにより、攻撃者がDoSを引き起こすことが可能であった可能異性があります（bsc#1052472）

  - CVE-2017-12654：ImageMagickのcoders/pict.cにあるReadPICTImage関数により、リモートの攻撃者が、細工されたファイルを介して、サービス拒否（メモリリーク）を引き起こすことが可能でした。
    （bsc#1052761）

  - CVE-2017-12663：メモリを消費することでDoSを引き起こす可能性のある、coders/map.cのWriteMAPImageのメモリリークが修正されました（bsc#1052754）

  - CVE-2017-12664：ImageMagickでは、coders/palm.cのWritePALMImageにメモリリークの脆弱性がありました。
    （bsc#1052750）

  - CVE-2017-12665：ImageMagickでは、coders/pict.cのWritePICTImageにメモリリークの脆弱性がありました。
    （bsc#1052747）

  - CVE-2017-12668：ImageMagickでは、coders/pcx.cのWritePCXImageにメモリリークの脆弱性がありました。
    （bsc#1052688）

  - CVE-2017-12674：攻撃者がDoSを引き起こすことが可能であった、coders/pdb.cのReadPDBImageにおけるCPU枯渇が修正されました（bsc#1052711）

  - CVE-2017-13058：ImageMagickでは、coders/pcx.cの関数WritePCXImageでメモリリークの脆弱性が見つかりました。これにより、攻撃者が細工されたファイルを介してサービス拒否を引き起こすことが可能でした。（bsc#1055069）

  - CVE-2017-13131：coders/miff.cの関数ReadMIFFImageでメモリリークの脆弱性が見つかりました。これにより、攻撃者がサービス拒否（NewLでのメモリ消費）を引き起こすことが可能でした（bsc#1055229）

  - CVE-2017-14060：サービス拒否を引き起こしていた可能性があるcoders/cut.cのReadCUTImage関数におけるNULLポインターのデリファレンスの問題が修正されました（bsc#1056768）

  - CVE-2017-14139：coders/msl.cのWriteMSLImageにおけるメモリリークの脆弱性が修正されました。（bsc#1057163）

  - CVE-2017-14224：coders/pcx.cのWritePCXImageにあるヒープベースのバッファオーバーフローにより、サービス拒否またはコード実行が発生する可能性があります。（bsc#1058009）

  - CVE-2017-17682：coders/wpg.cのExtractPostscriptで大きなループの脆弱性が修正されました。これにより、攻撃者がサービス拒否（CPUの枯渇）を引き起こすことが可能でした。（bsc#1072898）

  - CVE-2017-17885：ImageMagickでは、coders/pict.cの関数ReadPICTImageでメモリリークの脆弱性が見つかりました。これにより、攻撃者が細工されたPICTイメージファイルを介してサービス拒否を引き起こすことが可能でした。（bsc#1074119）

  - CVE-2017-17934：関数MSLPopImageおよびProcessMSLScriptのメモリリークにより、サービス拒否が発生する可能性がありました（bsc#1074170）

  - CVE-2017-18028：coders/tiff.cのReadTIFFImage関数でのメモリ枯渇が修正されました。（bsc#1076182）

  - CVE-2018-5357：- ImageMagickには、coders/dcm.cのReadDCMImage関数におけるメモリリークがありました（bsc#1075821）

  - CVE-2018-6405：ImageMagickのcoders/dcm.cにあるReadDCMImage関数で、各redmap、greenmap、bluemap変数が新しいポインターに上書きされる可能性があります。
    以前のポインターが失われ、メモリリークが発生します。これにより、リモートの攻撃者が、サービス拒否を引き起こすことが可能でした。（bsc#1078433）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

このImageMagick用の更新プログラムでは、次の問題が修正されています。修正されたセキュリティ問題：

  - CVE-2017-9405：A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion (bsc#1042911)

  - CVE-2017-9407：In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of service (memory leak) via a crafted file.
    （bsc#1042824）

  - CVE-2017-11166：In ReadXWDImage in coders\xwd.c a memoryleak could have caused memory exhaustion via a crafted length (bsc#1048110)

  - CVE-2017-11170：ReadTGAImage in coders\tga.c allowed for memory exhaustion via invalid colors data in the header of a TGA or VST file (bsc#1048272)

  - CVE-2017-11448：The ReadJPEGImage function in coders/jpeg.c in ImageMagick allowed remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file. (bsc#1049375)

  - CVE-2017-11450：A remote denial of service in coders/jpeg.c was fixed (bsc#1049374)

  - CVE-2017-11528：ReadDIBImage in coders/dib.c allows remote attackers to cause DoS via memory exhaustion (bsc#1050119)

  - CVE-2017-11530：ReadEPTImage in coders/ept.c allows remote attackers to cause DoS via memory exhaustion (bsc#1050122)

  - CVE-2017-11531：When ImageMagick processed a crafted file in convert, it could lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.
    （bsc#1050126）

  - CVE-2017-11533：A information leak by 1 byte due to heap-based buffer over-read in the WriteUILImage() in coders/uil.c was fixed (bsc#1050132)

  - CVE-2017-11537：When ImageMagick processed a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation. (bsc#1050048)

  - CVE-2017-11638、CVE-2017-11642：A NULL pointer dereference in theWriteMAPImage() in coders/map.c was fixed which could lead to a crash (bsc#1050617)

  - CVE-2017-12418：ImageMagick had memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c. (bsc#1052207)

  - CVE-2017-12427：ProcessMSLScript coders/msl.c allowed remote attackers to cause a DoS (bsc#1052248)

  - CVE-2017-12429：A memory exhaustion flaw in ReadMIFFImage in coders/miff.c was fixed, which allowed attackers to cause DoS (bsc#1052251)

  - CVE-2017-12432：In ImageMagick, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allowed attackers to cause a denial of service. (bsc#1052254)

  - CVE-2017-12566：A memory leak in ReadMVGImage in coders/mvg.c, could have allowed attackers to cause DoS (bsc#1052472)

  - CVE-2017-12654：The ReadPICTImage function in coders/pict.c in ImageMagick allowed attackers to cause a denial of service (memory leak) via a crafted file.
    （bsc#1052761）

  - CVE-2017-12663：A memory leak in WriteMAPImage in coders/map.c was fixed that could lead to a DoS via memory exhaustion (bsc#1052754)

  - CVE-2017-12664：ImageMagick had a memory leak vulnerability in WritePALMImage in coders/palm.c.
    （bsc#1052750）

  - CVE-2017-12665：ImageMagick had a memory leak vulnerability in WritePICTImage in coders/pict.c.
    （bsc#1052747）

  - CVE-2017-12668：ImageMagick had a memory leak vulnerability in WritePCXImage in coders/pcx.c.
    （bsc#1052688）

  - CVE-2017-12674：A CPU exhaustion in ReadPDBImage in coders/pdb.c was fixed, which allowed attackers to cause DoS (bsc#1052711)

  - CVE-2017-13058：In ImageMagick, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allowed attackers to cause a denial of service via a crafted file. (bsc#1055069)

  - CVE-2017-13131：A memory leak vulnerability was found in thefunction ReadMIFFImage in coders/miff.c, which allowed attackers tocause a denial of service (memory consumption in NewL (bsc#1055229)

  - CVE-2017-14060：A NULL pointer Dereference issue in the ReadCUTImage function in coders/cut.c was fixed that could have caused a Denial of Service (bsc#1056768)

  - CVE-2017-14139：A memory leak vulnerability in WriteMSLImage in coders/msl.c was fixed. (bsc#1057163)

  - CVE-2017-14224：A heap-based buffer overflow in WritePCXImage in coders/pcx.c could lead to denial of service or code execution. (bsc#1058009)

  - CVE-2017-17682：A large loop vulnerability was fixed in ExtractPostscript in coders/wpg.c, which allowed attackers to cause a denial of service (CPU exhaustion) (bsc#1072898)

  - CVE-2017-17885：In ImageMagick, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allowed attackers to cause a denial of service via a crafted PICT image file. (bsc#1074119)

  - CVE-2017-17934：A memory leak in the function MSLPopImage and ProcessMSLScript could have lead to a denial of service (bsc#1074170)

  - CVE-2017-18028：A memory exhaustion in the function ReadTIFFImage in coders/tiff.c was fixed. (bsc#1076182)

  - CVE-2018-5357：ImageMagick had memory leaks in the ReadDCMImage function in coders/dcm.c. (bsc#1075821)

  - CVE-2018-6405：In the ReadDCMImage function in coders/dcm.c in ImageMagick, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer.
    The previous pointer is lost, which leads to a memory leak. This allowed remote attackers to cause a denial of service. (bsc#1078433)

この更新はSUSEからインポートされました：SLE-12：更新プロジェクトを更新します。

The remote host is affected by the vulnerability described in GLSA-201711-07 (ImageMagick: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ImageMagick. Please       review the referenced CVE identifiers for details.
  Impact :

    Remote attackers, by enticing a user to process a specially crafted       file, could obtain sensitive information, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A heap-based buffer overflow in WritePCXImage in     coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote     attackers to cause a denial of service or code     execution via a crafted file.(CVE-2017-14224)

  - GetNextToken in MagickCore/token.c in ImageMagick 7.0.6     allows remote attackers to cause a denial of service     (heap-based buffer overflow and application crash) or     possibly have unspecified other impact via a crafted     SVG document, a different vulnerability than     CVE-2017-10928.(CVE-2017-14682)

  - ImageMagick version 7.0.7-2 contains a memory leak in     ReadYUVImage in coders/yuv.c.(CVE-2017-15033)

  - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference     vulnerability in ReadEnhMetaFile in     coders/emf.c.(CVE-2017-15016)

  - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference     vulnerability in ReadOneMNGImage in     coders/png.c.(CVE-2017-15017)

  - ImageMagick 7.0.6-2 has a memory leak vulnerability in     WriteMSLImage in coders/msl.c.(CVE-2017-14139)

  - ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6     allows remote attackers to cause a denial of service     (application crash) or possibly have unspecified other     impact via a crafted file, related to 'Conditional jump     or move depends on uninitialised     value(s).'(CVE-2017-15281)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: Insufficient shell characters filtering (CVE-2016-3714)

  - ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c (CVE-2018-16328)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a     denial of service (out-of-bounds read) via a crafted image file. (CVE-2014-8354)

  - PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-     of-bounds read). (CVE-2014-8355)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
104515	GLSA-201711-07：ImageMagick：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
107116	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0581-1)	Nessus	SuSE Local Security Checks	2018/3/2	2019/9/10	high
107185	openSUSE Security Update : ImageMagick (openSUSE-2018-230)	Nessus	SuSE Local Security Checks	2018/3/7	2021/1/19	high
104515	GLSA-201711-07：ImageMagick：多个漏洞	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
104515	GLSA-201711-07：ImageMagick：多個弱點	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
104283	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2017-1258)	Nessus	Huawei Local Security Checks	2017/11/1	2021/1/6	high
199269	RHEL 6 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
107116	SUSE SLED12 / SLES12セキュリティ更新プログラム：ImageMagick（SUSE-SU-2018:0581-1）	Nessus	SuSE Local Security Checks	2018/3/2	2019/9/10	high
107185	openSUSEセキュリティ更新プログラム：ImageMagick（openSUSE-2018-230）	Nessus	SuSE Local Security Checks	2018/3/7	2021/1/19	high
104515	GLSA-201711-07 : ImageMagick: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
104282	EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2017-1257)	Nessus	Huawei Local Security Checks	2017/11/1	2021/1/6	high
199277	RHEL 5 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
199283	RHEL 7 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/14	critical

検出

プラグインの検索

critical

high

high

critical

critical

high

critical

high

high

critical

high

critical

critical