Summary
It was discovered that PHP ImageMagick extension didn't check the address used
by an array. An attacker could use this issue to cause PHP ImageMagick to
crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | php-imagick | 3.4.3~rc2-2ubuntu4.1 |
Vulnerabilities 1
-
Medium 4.9
Out of bounds memory write in PHP Imagick extension
In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the func…
References
-
report
https://ubuntu.com/security/CVE-2019-11037