RHSA-2020:1180 — Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update

Fixed packages 84

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	autotrace	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::client	autotrace-debuginfo	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::client	autotrace-devel	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-common	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-debuginfo	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-el	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-filesystem	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-nox	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	emacs-terminal	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-c++	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-c++-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-debuginfo	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-doc	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	ImageMagick-perl	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	inkscape	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	inkscape-debuginfo	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	inkscape-docs	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::client	inkscape-view	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	autotrace	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	autotrace-debuginfo	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	autotrace-devel	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-common	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-debuginfo	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-el	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-filesystem	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-nox	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	emacs-terminal	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-c++	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-c++-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-debuginfo	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-doc	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	ImageMagick-perl	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	inkscape	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	inkscape-debuginfo	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	inkscape-docs	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	inkscape-view	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	autotrace	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::server	autotrace-debuginfo	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::server	autotrace-devel	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-common	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-debuginfo	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-el	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-filesystem	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-nox	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	emacs-terminal	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-c++	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-c++-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-debuginfo	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-doc	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	ImageMagick-perl	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	inkscape	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	inkscape-debuginfo	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	inkscape-docs	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::server	inkscape-view	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	autotrace	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	autotrace-debuginfo	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	autotrace-devel	0:0.31.1-38.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-common	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-debuginfo	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-el	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-filesystem	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-nox	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	emacs-terminal	1:24.3-23.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-c++	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-c++-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-debuginfo	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-devel	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-doc	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	ImageMagick-perl	0:6.9.10.68-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	inkscape	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	inkscape-debuginfo	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	inkscape-docs	0:0.92.2-3.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	inkscape-view	0:0.92.2-3.el7

Vulnerabilities 82

Medium 6.5

CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer func…

ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu

Apr 30, 2019
Unscored —

CVE-2017-1000476

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which a…

imagemagick imagemagick Debian Ubuntu

Jan 3, 2018
Unscored —

CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …

imagemagick imagemagick Debian Ubuntu

Jul 10, 2017
Unscored —

CVE-2017-12805

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attacke…

imagemagick imagemagick Debian Ubuntu

May 9, 2019
Unscored —

CVE-2017-12806

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers …

imagemagick imagemagick Debian Ubuntu

May 9, 2019
Unscored —

CVE-2017-18251

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in cod…

imagemagick imagemagick Debian Ubuntu

Mar 27, 2018
Unscored —

CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to…

imagemagick imagemagick Debian Ubuntu

Mar 27, 2018
Unscored —

CVE-2017-18254

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in co…

imagemagick imagemagick Debian Ubuntu

Mar 27, 2018
Unscored —

CVE-2017-18271

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage i…

imagemagick imagemagick Debian Ubuntu

May 18, 2018
Unscored —

CVE-2017-18273

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in…

imagemagick imagemagick Debian Ubuntu

May 18, 2018
Unscored —

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote att…

imagemagick imagemagick Debian Ubuntu

Apr 16, 2018
Unscored —

CVE-2018-10804

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.

imagemagick imagemagick Debian Ubuntu

May 8, 2018
Unscored —

CVE-2018-10805

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

imagemagick imagemagick Debian Ubuntu

May 8, 2018
Unscored —

CVE-2018-11656

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c,…

imagemagick imagemagick Debian Ubuntu

Jun 1, 2018
Unscored —

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds wr…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jun 20, 2018
Unscored —

CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds wr…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jun 20, 2018
Unscored —

CVE-2018-13153

In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2018
Unscored —

CVE-2018-14434

ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 20, 2018
Unscored —

CVE-2018-14435

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 20, 2018
Unscored —

CVE-2018-14436

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 20, 2018
Unscored —

CVE-2018-14437

ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 20, 2018
Unscored —

CVE-2018-15607

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Aug 21, 2018
Unscored —

CVE-2018-16328

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.

imagemagick Debian

Sep 1, 2018
Unscored —

CVE-2018-16640

ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 6, 2018
Unscored —

CVE-2018-16642

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 6, 2018
Unscored —

CVE-2018-16643

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTI…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 6, 2018
Unscored —

CVE-2018-16644

There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 6, 2018
Unscored —

CVE-2018-16645

There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 6, 2018
Unscored —

CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to caus…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 9, 2018
Unscored —

CVE-2018-16750

In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Sep 9, 2018
Unscored —

CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Oct 3, 2018
Unscored —

CVE-2018-17967

ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Oct 3, 2018
Unscored —

CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Oct 5, 2018
Unscored —

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote at…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Oct 7, 2018
Unscored —

CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…

imagemagick imagemagick graphicsmagick imagemagick6 Debian Ubuntu Alpine

Oct 21, 2018
Unscored —

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU an…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 26, 2018
Unscored —

CVE-2018-8804

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickC…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Mar 20, 2018
Unscored —

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), wh…

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Mar 30, 2018
Unscored —

CVE-2019-10650

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Mar 30, 2019
Unscored —

CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled re…

imagemagick imagemagick Debian Ubuntu

Apr 23, 2019
Unscored —

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Apr 23, 2019
Unscored —

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Apr 29, 2019
Unscored —

CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, whic…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Apr 29, 2019
Unscored —

CVE-2019-12974

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid…

imagemagick imagemagick Debian Ubuntu

Jun 26, 2019
Unscored —

CVE-2019-12975

ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.

imagemagick imagemagick Debian Ubuntu

Jun 26, 2019
Unscored —

CVE-2019-12976

ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.

imagemagick imagemagick Debian Ubuntu

Jun 26, 2019
Unscored —

CVE-2019-12978

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.

imagemagick imagemagick Debian Ubuntu

Jun 26, 2019
Unscored —

CVE-2019-12979

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/i…

imagemagick imagemagick Debian Ubuntu

Jun 26, 2019
Unscored —

CVE-2019-13133

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

imagemagick imagemagick6 Alpine

Jul 1, 2019
Unscored —

CVE-2019-13134

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.

imagemagick imagemagick6 Alpine

Jul 1, 2019
Unscored —

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 1, 2019
Unscored —

CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13300

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13301

ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13304

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assi…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13305

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strn…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13306

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one error…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13307

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13309

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLILis…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13310

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13311

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 5, 2019
Unscored —

CVE-2019-13454

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Jul 9, 2019
Unscored —

CVE-2019-14980

In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob f…

imagemagick imagemagick6 Alpine

Aug 12, 2019
Unscored —

CVE-2019-14981

In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Aug 12, 2019
Unscored —

CVE-2019-15139

The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Aug 18, 2019
Unscored —

CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Aug 18, 2019
Unscored —

CVE-2019-15141

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …

imagemagick imagemagick Ubuntu Alpine

Aug 18, 2019
Unscored —

CVE-2019-16708

ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-16709

ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.

imagemagick imagemagick imagemagick graphicsmagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-16710

ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-16711

ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-16712

ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-16713

ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-17540

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

imagemagick Alpine

Oct 14, 2019
Unscored —

CVE-2019-17541

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager …

imagemagick Alpine

Oct 14, 2019
Unscored —

CVE-2019-19948

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 24, 2019
Unscored —

CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, rela…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 24, 2019
Unscored —

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Mar 7, 2019
Unscored —

CVE-2019-7397

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders…

imagemagick imagemagick graphicsmagick imagemagick6 Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.

imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Feb 5, 2019
Unscored —

CVE-2019-9956

In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which a…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Mar 23, 2019

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=1532845
report
https://bugzilla.redhat.com/show_bug.cgi?id=1559892
report
https://bugzilla.redhat.com/show_bug.cgi?id=1561741
report
https://bugzilla.redhat.com/show_bug.cgi?id=1561742
report
https://bugzilla.redhat.com/show_bug.cgi?id=1561744
report
https://bugzilla.redhat.com/show_bug.cgi?id=1563875
report
https://bugzilla.redhat.com/show_bug.cgi?id=1572044
report
https://bugzilla.redhat.com/show_bug.cgi?id=1577398
report
https://bugzilla.redhat.com/show_bug.cgi?id=1577399
report
https://bugzilla.redhat.com/show_bug.cgi?id=1581486
report
https://bugzilla.redhat.com/show_bug.cgi?id=1581489
report
https://bugzilla.redhat.com/show_bug.cgi?id=1588170
report
https://bugzilla.redhat.com/show_bug.cgi?id=1594338
report
https://bugzilla.redhat.com/show_bug.cgi?id=1594339
report
https://bugzilla.redhat.com/show_bug.cgi?id=1598471
report
https://bugzilla.redhat.com/show_bug.cgi?id=1609933
report
https://bugzilla.redhat.com/show_bug.cgi?id=1609936
report
https://bugzilla.redhat.com/show_bug.cgi?id=1609939
report
https://bugzilla.redhat.com/show_bug.cgi?id=1609942
report
https://bugzilla.redhat.com/show_bug.cgi?id=1622738
report
https://bugzilla.redhat.com/show_bug.cgi?id=1624955
report
https://bugzilla.redhat.com/show_bug.cgi?id=1627916
report
https://bugzilla.redhat.com/show_bug.cgi?id=1627917
report
https://bugzilla.redhat.com/show_bug.cgi?id=1642614
report
https://bugzilla.redhat.com/show_bug.cgi?id=1664845
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672560
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672564
report
https://bugzilla.redhat.com/show_bug.cgi?id=1687436
report
https://bugzilla.redhat.com/show_bug.cgi?id=1692300
report
https://bugzilla.redhat.com/show_bug.cgi?id=1700755
report
https://bugzilla.redhat.com/show_bug.cgi?id=1704762
report
https://bugzilla.redhat.com/show_bug.cgi?id=1705406
report
https://bugzilla.redhat.com/show_bug.cgi?id=1705414
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707768
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707770
report
https://bugzilla.redhat.com/show_bug.cgi?id=1708517
report
https://bugzilla.redhat.com/show_bug.cgi?id=1708521

Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update

Fixed packages 84

Vulnerabilities 82

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer func…

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which a…

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attacke…

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers …

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in cod…

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to…

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in co…

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage i…

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in…

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote att…

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c,…

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds wr…

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds wr…

In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.

ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.

ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x…

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.

ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via…

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTI…

There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in…

There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/…

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to caus…

In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.

ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote at…

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU an…

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickC…

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), wh…

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled re…

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a…

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, whic…

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid…

ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.

ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/i…

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut…

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…

ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assi…

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strn…

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one error…

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLILis…

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.

In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob f…

In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…

The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …

ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.

ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.

ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.

ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.

ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.

ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager …

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.