Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-25664: A flaw was found in ImageMagick. A specially crafted image could cause an out-of-bounds memory write leading to a crash. The highest threat from this vulnerability is to system availability. CVE-2019-9956: In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file. CVE-2019-7398: In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. CVE-2019-7397: In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. CVE-2019-7175: In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. CVE-2019-19949: An out-of-bounds read was discovered in ImageMagick when writing PNG images. An attacker may abuse this flaw to trick a victim user into downloading a malicious image file and running it through ImageMagick, causing the application to crash. CVE-2019-19948: A heap-based buffer overflow flaw was discovered in ImageMagick when writing SGI images with improper columns and rows properties. An attacker may trick a victim user into downloading a malicious image file and running it through ImageMagick, possibly executing code onto the victim user's system. CVE-2019-17541: ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. CVE-2019-17540: ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. CVE-2019-16713: ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c. CVE-2019-16712: ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image. CVE-2019-16711: ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c. CVE-2019-16710: ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c. CVE-2019-16709: ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. CVE-2019-16708: ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage. CVE-2019-15141: WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597. CVE-2019-15140: coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c. CVE-2019-15139: The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472. CVE-2019-14981: In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file. CVE-2019-14980: In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file. CVE-2019-13454: ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c. CVE-2019-13311: A flaw was found in ImageMagick, containing memory leaks of AcquireMagickMemory due to a wand/mogrify.c error. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList(). An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. CVE-2019-13310: A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to an error found in MagickWand/mogrify.c. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList(). Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory. CVE-2019-13309: A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to the mishandling of the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. It was discovered that ImageMagick does not properly release acquired memory in function MogrifyImageList() when some error conditions are met, or the "compare" option is used. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory. CVE-2019-13307: A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applica
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ImageMagick | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-c++ | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-c++-devel | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-debuginfo | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-devel | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-doc | 0:6.9.10.68-3.amzn2.0.1 |
| Amazon Linux · 2 | ImageMagick-perl | 0:6.9.10.68-3.amzn2.0.1 |
Vulnerabilities 74
-
Medium 6.5
An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer func…
-
Unscored —
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which a…
-
Unscored —
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …
-
Unscored —
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attacke…
-
Unscored —
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers …
-
Unscored —
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in cod…
-
Unscored —
An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to…
-
Unscored —
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in co…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage i…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in…
-
Unscored —
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote att…
-
Unscored —
ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.
-
Unscored —
ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
-
Unscored —
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c,…
-
Unscored —
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds wr…
-
Unscored —
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds wr…
-
Unscored —
In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
-
Unscored —
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x…
-
Unscored —
In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
-
Unscored —
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to caus…
-
Unscored —
In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
-
Unscored —
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…
-
Unscored —
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU an…
-
Unscored —
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickC…
-
Unscored —
ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), wh…
-
Unscored —
In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…
-
Unscored —
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled re…
-
Unscored —
ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a…
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…
-
Unscored —
In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, whic…
-
Unscored —
A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid…
-
Unscored —
ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
-
Unscored —
ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
-
Unscored —
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.
-
Unscored —
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/i…
-
Unscored —
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
-
Unscored —
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
-
Unscored —
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assi…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strn…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one error…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLILis…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
-
Unscored —
ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
-
Unscored —
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob f…
-
Unscored —
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…
-
Unscored —
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…
-
Unscored —
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…
-
Unscored —
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
-
Unscored —
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
-
Unscored —
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
-
Unscored —
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
-
Unscored —
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
-
Unscored —
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager …
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, rela…
-
Unscored —
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
-
Unscored —
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders…
-
Unscored —
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
-
Unscored —
In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which a…
-
Unscored —
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-1000476.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-11166.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-12805.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-12806.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18251.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18252.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18254.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18271.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18273.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10177.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10804.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-10805.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-11656.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12599.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12600.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-13153.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14434.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14435.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14436.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14437.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-15607.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-16328.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-16749.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-16750.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-18544.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-20467.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-8804.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-9133.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-10131.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-10650.html