ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

Security update for ImageMagick

ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c ImageMagick: memory exhaustion in function ReadTIFFImage causing denial of service ImageMagick: memory exhaustion in function format8BIM causing denial of service ImageMagick: memory leak in ReadPCDImage function in coders/pcd.c ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c ImageMagick: memory leak in WriteGIFImage function in coders/gif.c ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c ImageMagick: infinite loop ReadTXTImage in function in coders/txt.c ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c ImageMagick: double free in WriteEPTImage function in coders/ept.c ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file ImageMagick: Memory leak in WriteTIFFImage ImageMagick: Memory leak in ReadYCBCRImage ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c ImageMagick: out of bounds write in ReadBMPImage and WriteBMPImage in coders/bmp.c ImageMagick: out of bounds write ReadDIBImage and WriteDIBImage in coders/dib.c ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c ImageMagick: memory leak for a colormap in WriteMPCImage in coders/mpc.c ImageMagick: memory leak in DecodeImage in coders/pcd.…

Security update for ImageMagick

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

Ein lokaler Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen oder Auswirkungen auf die Vertraulichkeit, Verfügbarkeit und Integrität auszuüben.