ImageMagick: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 17

• Unscored —
  CVE-2017-13058

  In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allo…

  imagemagick imagemagick Debian Ubuntu
  Aug 22, 2017
• Unscored —
  CVE-2017-13059

  In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which a…

  imagemagick imagemagick Debian Ubuntu
  Aug 22, 2017
• Unscored —
  CVE-2017-13060

  In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow…

  imagemagick imagemagick Debian Ubuntu
  Aug 22, 2017
• Unscored —
  CVE-2017-13061

  In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd…

  imagemagick imagemagick Debian Ubuntu
  Aug 22, 2017
• Unscored —
  CVE-2017-13062

  In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows…

  imagemagick imagemagick Debian Ubuntu
  Aug 22, 2017
• Unscored —
  CVE-2017-13131

  In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which all…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13132

  In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump…

  Aug 23, 2017
• Unscored —
  CVE-2017-13133

  In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to caus…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13134

  In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in co…

  imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  Aug 23, 2017
• Unscored —
  CVE-2017-13139

  In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13140

  In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attack…

  imagemagick Debian
  Aug 23, 2017
• Unscored —
  CVE-2017-13141

  In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in …

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13142

  In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an ins…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13143

  In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13144

  In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the im…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13145

  In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly valid…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017
• Unscored —
  CVE-2017-13146

  In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat…

  imagemagick imagemagick Debian Ubuntu
  Aug 23, 2017

Revision history

1. 2024-03-19 #25

   Neue Updates von Amazon aufgenommen

2. 2024-01-22 #24

   Neue Updates von Amazon aufgenommen

3. 2020-09-07 #23

   Neue Updates von Debian aufgenommen

4. 2019-12-16 #22

   Neue Updates von Ubuntu aufgenommen

5. 2018-10-17 #21

   New remediations available

6. 2018-05-21 #20

   New remediations available

7. 2018-03-04 #19

   New remediations available

8. 2018-02-22 #18

   New remediations available

9. 2018-02-20 #17

   New remediations available

10. 2018-02-11 #16

    New remediations available

11. 2018-02-04 #15

    New remediations available

12. 2018-01-24 #14

    New remediations available

13. 2018-01-18 #13

    New remediations available

14. 2018-01-09 #12

    New remediations available

15. 2018-01-04 #11

    New remediations available

16. 2017-12-27 #10

    New remediations available

17. 2017-12-20 #9

    New remediations available

18. 2017-11-30 #8

    New remediations available

19. 2017-11-23 #7

    New remediations available

20. 2017-11-19 #6

    New remediations available

21. 2017-11-12 #5

    New remediations available

22. 2017-11-08 #4

    New remediations available

23. 2017-11-05 #3

    New remediations available

24. 2017-08-22 #1

    Initial Release

25. 2017-08-22 #2

    Version nicht vorhanden

References

• National Vulnerability Database CVE-2017-13141 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13141
• National Vulnerability Database CVE-2017-13142 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13142
• National Vulnerability Database CVE-2017-13143 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13143
• National Vulnerability Database CVE-2017-13144 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13144
• National Vulnerability Database CVE-2017-13145 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13145
• National Vulnerability Database CVE-2017-13146 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13146
• National Vulnerability Database CVE-2017-13131 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13131
• National Vulnerability Database CVE-2017-13132 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13132
• National Vulnerability Database CVE-2017-13133 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13133
• National Vulnerability Database CVE-2017-13134 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13134
• National Vulnerability Database CVE-2017-13139 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13139
• National Vulnerability Database CVE-2017-13140 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13140
• National Vulnerability Database CVE-2017-13062 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13062
• National Vulnerability Database CVE-2017-13061 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13061
• National Vulnerability Database CVE-2017-13060 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13060
• National Vulnerability Database CVE-2017-13059 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13059
• National Vulnerability Database CVE-2017-13058 vom 2017-08-22
  https://nvd.nist.gov/vuln/detail/CVE-2017-13058
• Debian Security Advisory DSA-4019 vom 2017-11-06
  https://www.debian.org/security/2017/dsa-4019
• SUSE Security Update SUSE-SU-2017:2949-1 vom 2017-11-08
  https://www.suse.com/support/update/announcement/2017/suse-su-20172949-1.html
• Debian Security Advisory DSA-4032 vom 2017-11-12
  https://www.debian.org/security/2017/dsa-4032
• Debian Security Advisory DSA-4040 vom 2017-11-18
  https://www.debian.org/security/2017/dsa-4040
• SUSE Security Update SUSE-SU-2017:3056-1 vom 2017-11-24
  https://www.suse.com/support/update/announcement/2017/suse-su-20173056-1.html
• SUSE Security Update SUSE-SU-2017:3168-1 vom 2017-12-01
  https://www.suse.com/support/update/announcement/2017/suse-su-20173168-1.html
• SUSE Security Update SUSE-SU-2017:3388-1 vom 2017-12-21
  https://www.suse.com/support/update/announcement/2017/suse-su-20173388-1.html
• SUSE Security Update SUSE-SU-2017:3378-1 vom 2017-12-21
  https://www.suse.com/support/update/announcement/2017/suse-su-20173378-1.html
• SUSE Security Update SUSE-SU-2017:3435-1 vom 2017-12-28
  https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1.html
• SUSE Security Update SUSE-SU-2018:0017-1 vom 2018-01-04
  https://www.suse.com/support/update/announcement/2018/suse-su-20180017-1.html
• SUSE Security Update SUSE-SU-2018:0043-1 vom 2018-01-09
  https://www.suse.com/support/update/announcement/2018/suse-su-20180043-1.html
• SUSE Security Update SUSE-SU-2018:0130-1 vom 2018-01-18
  https://www.suse.com/support/update/announcement/2018/suse-su-20180130-1.html
• SUSE Security Update SUSE-SU-2018:0132-1 vom 2018-01-18
  https://www.suse.com/support/update/announcement/2018/suse-su-20180132-1.html
• SUSE Security Update SUSE-SU-2018:0197-1 vom 2018-01-25
  https://www.suse.com/support/update/announcement/2018/suse-su-20180197-1.html
• SUSE Security Update SUSE-SU-2018:0350-1 vom 2018-02-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180350-1.html
• SUSE Security Update SUSE-SU-2018:0349-1 vom 2018-02-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180349-1.html
• SUSE Security Update SUSE-SU-2018:0413-1 vom 2018-02-10
  https://www.suse.com/support/update/announcement/2018/suse-su-20180413-1.html
• SUSE Security Update SUSE-SU-2018:0486-1 vom 2018-02-20
  https://www.suse.com/support/update/announcement/2018/suse-su-20180486-1.html
• SUSE Security Update SUSE-SU-2018:0524-1 vom 2018-02-22
  https://www.suse.com/support/update/announcement/2018/suse-su-20180524-1.html
• SUSE Security Update SUSE-SU-2018:0581-1 vom 2018-03-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180581-1.html
• Debian Security Advisory DSA-4204 vom 2018-05-20
  https://www.debian.org/security/2018/dsa-4204
• SUSE Security Update SUSE-SU-2018:3191-1 vom 2018-10-18
  https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1.html
• Ubuntu Security Notice USN-4222-1 vom 2019-12-16
  https://usn.ubuntu.com/4222-1/
• Debian Security Advisory DLA-2366 vom 2020-09-08
  https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202009/msg00007.html
• Amazon Linux Security Advisory ALAS-2024-2432 vom 2024-01-23
  https://alas.aws.amazon.com/AL2/ALAS-2024-2432.html
• Amazon Linux Security Advisory ALAS-2024-1926 vom 2024-03-19
  https://alas.aws.amazon.com/ALAS-2024-1926.html