Description
imagemagick 6.8.9.6 has remote DOS via infinite loop
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | imagemagick | 8:6.8.9.9-1 | — |
| Debian 13 | imagemagick | 8:6.8.9.9-1 | — |
| Debian 12 | imagemagick | 8:6.8.9.9-1 | — |
References
- http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html
- https://security-tracker.debian.org/tracker/CVE-2014-8561
- https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-8561
- http://seclists.org/fulldisclosure/2014/Nov/1
- http://www.openwall.com/lists/oss-security/2014/10/31/3