Summary
USN-4586-1 fixed vulnerabilities in PHP ImageMagick. This update
provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that PHP ImageMagick extension didn't check the address used
by an array. An attacker could use this issue to cause PHP ImageMagick to
crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | php-imagick | 3.4.0~rc6-1ubuntu3+esm1 |
Vulnerabilities 1
-
Medium 4.9
Out of bounds memory write in PHP Imagick extension
In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the func…
References
-
report
https://ubuntu.com/security/CVE-2019-11037