Vulnerability-Lookup

RHSA-2020:1180

Vulnerability from csaf_redhat - Published: 2020-03-31 20:15 - Updated: 2026-06-27 05:44

Summary

Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. The following packages have been upgraded to a later upstream version: ImageMagick (6.9.10.68). (BZ#1764595) Security Fix(es): * ImageMagick: multiple security vulnerabilities (CVE-2018-12599, CVE-2018-12600, CVE-2019-9956, CVE-2019-11597, CVE-2019-11598, CVE-2019-12974, CVE-2019-12978, CVE-2019-12979, CVE-2019-13135, CVE-2019-13295, CVE-2019-13297, CVE-2019-13300, CVE-2019-13301, CVE-2019-13304, CVE-2019-13305, CVE-2019-13306, CVE-2019-13307, CVE-2019-15139, CVE-2019-15140, CVE-2019-15141, CVE-2019-17540, CVE-2019-17541, CVE-2019-19948, CVE-2017-11166, CVE-2017-12805, CVE-2017-12806, CVE-2017-18251, CVE-2017-18252, CVE-2017-18254, CVE-2017-18271, CVE-2017-18273, CVE-2017-1000476, CVE-2018-8804, CVE-2018-9133, CVE-2018-10177, CVE-2018-10804, CVE-2018-10805, CVE-2018-11656, CVE-2018-13153, CVE-2018-14434, CVE-2018-14435, CVE-2018-14436, CVE-2018-14437, CVE-2018-15607, CVE-2018-16328, CVE-2018-16749, CVE-2018-16750, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175, CVE-2019-7397, CVE-2019-7398, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-12975, CVE-2019-12976, CVE-2019-13133, CVE-2019-13134, CVE-2019-13309, CVE-2019-13310, CVE-2019-13311, CVE-2019-13454, CVE-2019-14980, CVE-2019-14981, CVE-2019-16708, CVE-2019-16709, CVE-2019-16710, CVE-2019-16711, CVE-2019-16712, CVE-2019-16713, CVE-2019-19949) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products

Product	Version	Remediation
Unresolved product id: 7Client-7.8:ImageMagick-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-0:6.9.10.68-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-1:24.3-23.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-common-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-debuginfo-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-filesystem-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:emacs-nox-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:inkscape-0:0.92.2-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:inkscape-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-0:0.31.1-38.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-devel-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:autotrace-devel-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:emacs-el-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:emacs-terminal-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:inkscape-docs-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.8:inkscape-view-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.8:emacs-1:24.3-23.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.8:emacs-filesystem-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-0:6.9.10.68-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-0:0.31.1-38.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-devel-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:autotrace-devel-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-common-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-debuginfo-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-el-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-nox-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:emacs-terminal-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:inkscape-0:0.92.2-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:inkscape-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:inkscape-docs-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.8:inkscape-view-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-1:24.3-23.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-1:24.3-23.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-1:24.3-23.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-1:24.3-23.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-common-1:24.3-23.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-common-1:24.3-23.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-common-1:24.3-23.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-common-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-debuginfo-1:24.3-23.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-debuginfo-1:24.3-23.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-debuginfo-1:24.3-23.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-debuginfo-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-filesystem-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-nox-1:24.3-23.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-nox-1:24.3-23.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-nox-1:24.3-23.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:emacs-nox-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:inkscape-0:0.92.2-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:inkscape-0:0.92.2-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:inkscape-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:inkscape-debuginfo-0:0.92.2-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.s390	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:autotrace-devel-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:emacs-el-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:emacs-terminal-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-0:0.92.2-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-0:0.92.2-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-0:0.92.2-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-docs-0:0.92.2-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-docs-0:0.92.2-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-docs-0:0.92.2-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-docs-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-view-0:0.92.2-3.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-view-0:0.92.2-3.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-view-0:0.92.2-3.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.8:inkscape-view-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-0:6.9.10.68-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-c++-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:ImageMagick-perl-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-1:24.3-23.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-common-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-debuginfo-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-filesystem-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:emacs-nox-1:24.3-23.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:inkscape-0:0.92.2-3.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:inkscape-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-c++-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-debuginfo-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-devel-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:ImageMagick-doc-0:6.9.10.68-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-0:0.31.1-38.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-debuginfo-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-devel-0:0.31.1-38.el7.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:autotrace-devel-0:0.31.1-38.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:emacs-el-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:emacs-terminal-1:24.3-23.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:inkscape-debuginfo-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:inkscape-docs-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.8:inkscape-view-0:0.92.2-3.el7.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2017-12805

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-12806

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-18251

A memory leak vulnerability has been discovered in ImageMagick in the ReadPCDImage function of coders/pcd.c file. An attacker could use this flaw to cause a denial of service via a crafted file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-617 - Reachable Assertion

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-18254

A memory leak vulnerability has been discovered in ImageMagick in the WriteGIFImage function of coders/gif.c file. An attacker could use this flaw to cause a denial of service via a crafted file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-18271

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-18273

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2017-1000476

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-8804

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-416 - Use After Free

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-10177

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics (MNG) data. An attacker could exploit this to cause a denial of service via crafted MNG file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-10804

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-10805

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-11656

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2018-13153

A memory leak was discovered in ImageMagick in the XMagickCommand function in animate.c file. An array of strings, named filelist, is allocated on the heap but not released in case the function ExpandFilenames returns an error code.

3.5 (Low)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-14434

ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-14435

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.

3.5 (Low)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-14436

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-14437

ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-15607

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16328

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.

4.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16640

ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16642

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-787 - Out-of-bounds Write

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2018-16643

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-20 - Improper Input Validation

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16644

There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-20 - Improper Input Validation

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16645

There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-617 - Reachable Assertion

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-16750

In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-17967

ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.

4.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-7397

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-9956

In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-193 - Off-by-one Error

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-10650

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-248 - Uncaught Exception

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

8.1 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-12974

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-12975

It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the WriteDPXImage() function. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-12976

It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the ReadPCLImage() function. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-12978

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-456 - Missing Initialization of a Variable

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-12979

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-456 - Missing Initialization of a Variable

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13133

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-13134

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

7.4 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-456 - Missing Initialization of a Variable

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13295

A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a width of zero mishandle error. Applications compiled against ImageMagick libraries that accept untrustworthy images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or leak application data.

5.4 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13297

A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a height of zero mishandle error. Applications compiled against ImageMagick libraries that accept untrustworthy images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or leak application data.

5.4 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13300

A heap-based buffer overflow was discovered in ImageMagick in the way it applies a value with arithmetic, relational, or logical operators to an image due to mishandling columns. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13301

ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13304

A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced assignment. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-193 - Off-by-one Error

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13305

A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced strncpy and off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13306

A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13307

A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-13309

A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to the mishandling of the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. It was discovered that ImageMagick does not properly release acquired memory in function MogrifyImageList() when some error conditions are met, or the "compare" option is used. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-13310

A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to an error found in MagickWand/mogrify.c. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList(). Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-13311

A flaw was found in ImageMagick, containing memory leaks of AcquireMagickMemory due to a wand/mogrify.c error. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList(). An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-13454

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-369 - Divide By Zero

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-14980

In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.

5.9 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-416 - Use After Free

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-14981

In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-369 - Divide By Zero

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-15139

The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-15141

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-788 - Access of Memory Location After End of Buffer

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-16708

A memory leak was discovered in ImageMagick in function DestroyXResources. An application that uses ImageMagick may be vulnerable to this flaw and crash due to some memory that is never freed.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-16709

A memory leak was discovered in ImageMagick in function ReadDPSImage. A long-running application that uses ImageMagick to parse DPS image may be vulnerable to this flaw and crash due to some memory that is never freed.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-16710

A memory leak was discovered in ImageMagick in function ReadDOTImage. An application that uses ImageMagick to parse DOT images may be vulnerable to this flaw and crash due to some memory that is never freed.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-16711

A memory leak was discovered in ImageMagick in function Huffman2DEncodeImage in ps2.c. An application that uses ImageMagick to parse PS2 images may be vulnerable to this flaw and crash due to some memory that is never freed.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-16712

A memory leak was discovered in ImageMagick in function Huffman2DEncodeImage in ps3.c. An application that uses ImageMagick to parse PS3 images may be vulnerable to this flaw and crash due to some memory that is never freed.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-16713

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

CVE-2019-17540

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-17541

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-19948

A heap-based buffer overflow flaw was discovered in ImageMagick when writing SGI images with improper columns and rows properties. An attacker may trick a victim user into downloading a malicious image file and running it through ImageMagick, possibly executing code onto the victim user's system.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Moderate

CVE-2019-19949

An out-of-bounds read was discovered in ImageMagick when writing PNG images. An attacker may abuse this flaw to trick a victim user into downloading a malicious image file and running it through ImageMagick, causing the application to crash.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 218 products, the same list as for CVE-2017-11166

Threats

Impact Low

References

410 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:1180	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1532845	external
https://bugzilla.redhat.com/show_bug.cgi?id=1559892	external
https://bugzilla.redhat.com/show_bug.cgi?id=1561741	external
https://bugzilla.redhat.com/show_bug.cgi?id=1561742	external
https://bugzilla.redhat.com/show_bug.cgi?id=1561744	external
https://bugzilla.redhat.com/show_bug.cgi?id=1563875	external
https://bugzilla.redhat.com/show_bug.cgi?id=1572044	external
https://bugzilla.redhat.com/show_bug.cgi?id=1577398	external
https://bugzilla.redhat.com/show_bug.cgi?id=1577399	external
https://bugzilla.redhat.com/show_bug.cgi?id=1581486	external
https://bugzilla.redhat.com/show_bug.cgi?id=1581489	external
https://bugzilla.redhat.com/show_bug.cgi?id=1588170	external
https://bugzilla.redhat.com/show_bug.cgi?id=1594338	external
https://bugzilla.redhat.com/show_bug.cgi?id=1594339	external
https://bugzilla.redhat.com/show_bug.cgi?id=1598471	external
https://bugzilla.redhat.com/show_bug.cgi?id=1609933	external
https://bugzilla.redhat.com/show_bug.cgi?id=1609936	external
https://bugzilla.redhat.com/show_bug.cgi?id=1609939	external
https://bugzilla.redhat.com/show_bug.cgi?id=1609942	external
https://bugzilla.redhat.com/show_bug.cgi?id=1622738	external
https://bugzilla.redhat.com/show_bug.cgi?id=1624955	external
https://bugzilla.redhat.com/show_bug.cgi?id=1627916	external
https://bugzilla.redhat.com/show_bug.cgi?id=1627917	external
https://bugzilla.redhat.com/show_bug.cgi?id=1642614	external
https://bugzilla.redhat.com/show_bug.cgi?id=1664845	external
https://bugzilla.redhat.com/show_bug.cgi?id=1672560	external
https://bugzilla.redhat.com/show_bug.cgi?id=1672564	external
https://bugzilla.redhat.com/show_bug.cgi?id=1687436	external
https://bugzilla.redhat.com/show_bug.cgi?id=1692300	external
https://bugzilla.redhat.com/show_bug.cgi?id=1700755	external
https://bugzilla.redhat.com/show_bug.cgi?id=1704762	external
https://bugzilla.redhat.com/show_bug.cgi?id=1705406	external
https://bugzilla.redhat.com/show_bug.cgi?id=1705414	external
https://bugzilla.redhat.com/show_bug.cgi?id=1707768	external
https://bugzilla.redhat.com/show_bug.cgi?id=1707770	external
https://bugzilla.redhat.com/show_bug.cgi?id=1708517	external
https://bugzilla.redhat.com/show_bug.cgi?id=1708521	external
https://bugzilla.redhat.com/show_bug.cgi?id=1726078	external
https://bugzilla.redhat.com/show_bug.cgi?id=1726081	external
https://bugzilla.redhat.com/show_bug.cgi?id=1726104	external
https://bugzilla.redhat.com/show_bug.cgi?id=1728474	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730329	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730333	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730337	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730351	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730357	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730361	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730364	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730575	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730580	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730596	external
https://bugzilla.redhat.com/show_bug.cgi?id=1730604	external
https://bugzilla.redhat.com/show_bug.cgi?id=1732278	external
https://bugzilla.redhat.com/show_bug.cgi?id=1732282	external
https://bugzilla.redhat.com/show_bug.cgi?id=1732284	external
https://bugzilla.redhat.com/show_bug.cgi?id=1732292	external
https://bugzilla.redhat.com/show_bug.cgi?id=1732294	external
https://bugzilla.redhat.com/show_bug.cgi?id=1743658	external
https://bugzilla.redhat.com/show_bug.cgi?id=1757779	external
https://bugzilla.redhat.com/show_bug.cgi?id=1757911	external
https://bugzilla.redhat.com/show_bug.cgi?id=1764595	external
https://bugzilla.redhat.com/show_bug.cgi?id=1765205	external
https://bugzilla.redhat.com/show_bug.cgi?id=1765208	external
https://bugzilla.redhat.com/show_bug.cgi?id=1765211	external
https://bugzilla.redhat.com/show_bug.cgi?id=1765330	external
https://bugzilla.redhat.com/show_bug.cgi?id=1767087	external
https://bugzilla.redhat.com/show_bug.cgi?id=1767802	external
https://bugzilla.redhat.com/show_bug.cgi?id=1767812	external
https://bugzilla.redhat.com/show_bug.cgi?id=1767828	external
https://bugzilla.redhat.com/show_bug.cgi?id=1772643	external
https://bugzilla.redhat.com/show_bug.cgi?id=1792480	external
https://bugzilla.redhat.com/show_bug.cgi?id=1793177	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801661	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801665	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801667	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801673	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801674	external
https://bugzilla.redhat.com/show_bug.cgi?id=1801681	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2017-11166	self
https://bugzilla.redhat.com/show_bug.cgi?id=1772643	external
https://www.cve.org/CVERecord?id=CVE-2017-11166	external
https://nvd.nist.gov/vuln/detail/CVE-2017-11166	external
https://access.redhat.com/security/cve/CVE-2017-12805	self
https://bugzilla.redhat.com/show_bug.cgi?id=1708521	external
https://www.cve.org/CVERecord?id=CVE-2017-12805	external
https://nvd.nist.gov/vuln/detail/CVE-2017-12805	external
https://access.redhat.com/security/cve/CVE-2017-12806	self
https://bugzilla.redhat.com/show_bug.cgi?id=1708517	external
https://www.cve.org/CVERecord?id=CVE-2017-12806	external
https://nvd.nist.gov/vuln/detail/CVE-2017-12806	external
https://access.redhat.com/security/cve/CVE-2017-18251	self
https://bugzilla.redhat.com/show_bug.cgi?id=1561741	external
https://www.cve.org/CVERecord?id=CVE-2017-18251	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18251	external
https://access.redhat.com/security/cve/CVE-2017-18252	self
https://bugzilla.redhat.com/show_bug.cgi?id=1561742	external
https://www.cve.org/CVERecord?id=CVE-2017-18252	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18252	external
https://access.redhat.com/security/cve/CVE-2017-18254	self
https://bugzilla.redhat.com/show_bug.cgi?id=1561744	external
https://www.cve.org/CVERecord?id=CVE-2017-18254	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18254	external
https://access.redhat.com/security/cve/CVE-2017-18271	self
https://bugzilla.redhat.com/show_bug.cgi?id=1581486	external
https://www.cve.org/CVERecord?id=CVE-2017-18271	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18271	external
https://access.redhat.com/security/cve/CVE-2017-18273	self
https://bugzilla.redhat.com/show_bug.cgi?id=1581489	external
https://www.cve.org/CVERecord?id=CVE-2017-18273	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18273	external
https://access.redhat.com/security/cve/CVE-2017-1000476	self
https://bugzilla.redhat.com/show_bug.cgi?id=1532845	external
https://www.cve.org/CVERecord?id=CVE-2017-1000476	external
https://nvd.nist.gov/vuln/detail/CVE-2017-1000476	external
https://access.redhat.com/security/cve/CVE-2018-8804	self
https://bugzilla.redhat.com/show_bug.cgi?id=1559892	external
https://www.cve.org/CVERecord?id=CVE-2018-8804	external
https://nvd.nist.gov/vuln/detail/CVE-2018-8804	external
https://access.redhat.com/security/cve/CVE-2018-9133	self
https://bugzilla.redhat.com/show_bug.cgi?id=1563875	external
https://www.cve.org/CVERecord?id=CVE-2018-9133	external
https://nvd.nist.gov/vuln/detail/CVE-2018-9133	external
https://access.redhat.com/security/cve/CVE-2018-10177	self
https://bugzilla.redhat.com/show_bug.cgi?id=1572044	external
https://www.cve.org/CVERecord?id=CVE-2018-10177	external
https://nvd.nist.gov/vuln/detail/CVE-2018-10177	external
https://access.redhat.com/security/cve/CVE-2018-10804	self
https://bugzilla.redhat.com/show_bug.cgi?id=1577399	external
https://www.cve.org/CVERecord?id=CVE-2018-10804	external
https://nvd.nist.gov/vuln/detail/CVE-2018-10804	external
https://access.redhat.com/security/cve/CVE-2018-10805	self
https://bugzilla.redhat.com/show_bug.cgi?id=1577398	external
https://www.cve.org/CVERecord?id=CVE-2018-10805	external
https://nvd.nist.gov/vuln/detail/CVE-2018-10805	external
https://access.redhat.com/security/cve/CVE-2018-11656	self
https://bugzilla.redhat.com/show_bug.cgi?id=1588170	external
https://www.cve.org/CVERecord?id=CVE-2018-11656	external
https://nvd.nist.gov/vuln/detail/CVE-2018-11656	external
https://access.redhat.com/security/cve/CVE-2018-12599	self
https://bugzilla.redhat.com/show_bug.cgi?id=1594338	external
https://www.cve.org/CVERecord?id=CVE-2018-12599	external
https://nvd.nist.gov/vuln/detail/CVE-2018-12599	external
https://access.redhat.com/security/cve/CVE-2018-12600	self
https://bugzilla.redhat.com/show_bug.cgi?id=1594339	external
https://www.cve.org/CVERecord?id=CVE-2018-12600	external
https://nvd.nist.gov/vuln/detail/CVE-2018-12600	external
https://access.redhat.com/security/cve/CVE-2018-13153	self
https://bugzilla.redhat.com/show_bug.cgi?id=1598471	external
https://www.cve.org/CVERecord?id=CVE-2018-13153	external
https://nvd.nist.gov/vuln/detail/CVE-2018-13153	external
https://access.redhat.com/security/cve/CVE-2018-14434	self
https://bugzilla.redhat.com/show_bug.cgi?id=1609933	external
https://www.cve.org/CVERecord?id=CVE-2018-14434	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14434	external
https://access.redhat.com/security/cve/CVE-2018-14435	self
https://bugzilla.redhat.com/show_bug.cgi?id=1609936	external
https://www.cve.org/CVERecord?id=CVE-2018-14435	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14435	external
https://access.redhat.com/security/cve/CVE-2018-14436	self
https://bugzilla.redhat.com/show_bug.cgi?id=1609939	external
https://www.cve.org/CVERecord?id=CVE-2018-14436	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14436	external
https://access.redhat.com/security/cve/CVE-2018-14437	self
https://bugzilla.redhat.com/show_bug.cgi?id=1609942	external
https://www.cve.org/CVERecord?id=CVE-2018-14437	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14437	external
https://access.redhat.com/security/cve/CVE-2018-15607	self
https://bugzilla.redhat.com/show_bug.cgi?id=1622738	external
https://www.cve.org/CVERecord?id=CVE-2018-15607	external
https://nvd.nist.gov/vuln/detail/CVE-2018-15607	external
https://access.redhat.com/security/cve/CVE-2018-16328	self
https://bugzilla.redhat.com/show_bug.cgi?id=1624955	external
https://www.cve.org/CVERecord?id=CVE-2018-16328	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16328	external
https://access.redhat.com/security/cve/CVE-2018-16640	self
https://bugzilla.redhat.com/show_bug.cgi?id=1626570	external
https://www.cve.org/CVERecord?id=CVE-2018-16640	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16640	external
https://access.redhat.com/security/cve/CVE-2018-16642	self
https://bugzilla.redhat.com/show_bug.cgi?id=1626591	external
https://www.cve.org/CVERecord?id=CVE-2018-16642	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16642	external
https://access.redhat.com/security/cve/CVE-2018-16643	self
https://bugzilla.redhat.com/show_bug.cgi?id=1626599	external
https://www.cve.org/CVERecord?id=CVE-2018-16643	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16643	external
https://access.redhat.com/security/cve/CVE-2018-16644	self
https://bugzilla.redhat.com/show_bug.cgi?id=1626606	external
https://www.cve.org/CVERecord?id=CVE-2018-16644	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16644	external
https://access.redhat.com/security/cve/CVE-2018-16645	self
https://bugzilla.redhat.com/show_bug.cgi?id=1626611	external
https://www.cve.org/CVERecord?id=CVE-2018-16645	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16645	external
https://access.redhat.com/security/cve/CVE-2018-16749	self
https://bugzilla.redhat.com/show_bug.cgi?id=1627916	external
https://www.cve.org/CVERecord?id=CVE-2018-16749	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16749	external
https://access.redhat.com/security/cve/CVE-2018-16750	self
https://bugzilla.redhat.com/show_bug.cgi?id=1627917	external
https://www.cve.org/CVERecord?id=CVE-2018-16750	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16750	external
https://access.redhat.com/security/cve/CVE-2018-17966	self
https://bugzilla.redhat.com/show_bug.cgi?id=1636587	external
https://www.cve.org/CVERecord?id=CVE-2018-17966	external
https://nvd.nist.gov/vuln/detail/CVE-2018-17966	external
https://access.redhat.com/security/cve/CVE-2018-17967	self
https://bugzilla.redhat.com/show_bug.cgi?id=1636590	external
https://www.cve.org/CVERecord?id=CVE-2018-17967	external
https://nvd.nist.gov/vuln/detail/CVE-2018-17967	external
https://access.redhat.com/security/cve/CVE-2018-18016	self
https://bugzilla.redhat.com/show_bug.cgi?id=1636579	external
https://www.cve.org/CVERecord?id=CVE-2018-18016	external
https://nvd.nist.gov/vuln/detail/CVE-2018-18016	external
https://access.redhat.com/security/cve/CVE-2018-18024	self
https://bugzilla.redhat.com/show_bug.cgi?id=1637189	external
https://www.cve.org/CVERecord?id=CVE-2018-18024	external
https://nvd.nist.gov/vuln/detail/CVE-2018-18024	external
https://access.redhat.com/security/cve/CVE-2018-18544	self
https://bugzilla.redhat.com/show_bug.cgi?id=1642614	external
https://www.cve.org/CVERecord?id=CVE-2018-18544	external
https://nvd.nist.gov/vuln/detail/CVE-2018-18544	external
https://access.redhat.com/security/cve/CVE-2018-20467	self
https://bugzilla.redhat.com/show_bug.cgi?id=1664845	external
https://www.cve.org/CVERecord?id=CVE-2018-20467	external
https://nvd.nist.gov/vuln/detail/CVE-2018-20467	external
https://access.redhat.com/security/cve/CVE-2019-7175	self
https://bugzilla.redhat.com/show_bug.cgi?id=1687436	external
https://www.cve.org/CVERecord?id=CVE-2019-7175	external
https://nvd.nist.gov/vuln/detail/CVE-2019-7175	external
https://access.redhat.com/security/cve/CVE-2019-7397	self
https://bugzilla.redhat.com/show_bug.cgi?id=1672564	external
https://www.cve.org/CVERecord?id=CVE-2019-7397	external
https://nvd.nist.gov/vuln/detail/CVE-2019-7397	external
https://access.redhat.com/security/cve/CVE-2019-7398	self
https://bugzilla.redhat.com/show_bug.cgi?id=1672560	external
https://www.cve.org/CVERecord?id=CVE-2019-7398	external
https://nvd.nist.gov/vuln/detail/CVE-2019-7398	external
https://access.redhat.com/security/cve/CVE-2019-9956	self
https://bugzilla.redhat.com/show_bug.cgi?id=1692300	external
https://www.cve.org/CVERecord?id=CVE-2019-9956	external
https://nvd.nist.gov/vuln/detail/CVE-2019-9956	external
https://access.redhat.com/security/cve/CVE-2019-10131	self
https://bugzilla.redhat.com/show_bug.cgi?id=1704762	external
https://www.cve.org/CVERecord?id=CVE-2019-10131	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10131	external
https://access.redhat.com/security/cve/CVE-2019-10650	self
https://bugzilla.redhat.com/show_bug.cgi?id=1700755	external
https://www.cve.org/CVERecord?id=CVE-2019-10650	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10650	external
https://access.redhat.com/security/cve/CVE-2019-11470	self
https://bugzilla.redhat.com/show_bug.cgi?id=1707770	external
https://www.cve.org/CVERecord?id=CVE-2019-11470	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11470	external
https://access.redhat.com/security/cve/CVE-2019-11472	self
https://bugzilla.redhat.com/show_bug.cgi?id=1707768	external
https://www.cve.org/CVERecord?id=CVE-2019-11472	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11472	external
https://access.redhat.com/security/cve/CVE-2019-11597	self
https://bugzilla.redhat.com/show_bug.cgi?id=1705406	external
https://www.cve.org/CVERecord?id=CVE-2019-11597	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11597	external
https://access.redhat.com/security/cve/CVE-2019-11598	self
https://bugzilla.redhat.com/show_bug.cgi?id=1705414	external
https://www.cve.org/CVERecord?id=CVE-2019-11598	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11598	external
https://access.redhat.com/security/cve/CVE-2019-12974	self
https://bugzilla.redhat.com/show_bug.cgi?id=1732278	external
https://www.cve.org/CVERecord?id=CVE-2019-12974	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12974	external
https://access.redhat.com/security/cve/CVE-2019-12975	self
https://bugzilla.redhat.com/show_bug.cgi?id=1732282	external
https://www.cve.org/CVERecord?id=CVE-2019-12975	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12975	external
https://access.redhat.com/security/cve/CVE-2019-12976	self
https://bugzilla.redhat.com/show_bug.cgi?id=1732284	external
https://www.cve.org/CVERecord?id=CVE-2019-12976	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12976	external
https://access.redhat.com/security/cve/CVE-2019-12978	self
https://bugzilla.redhat.com/show_bug.cgi?id=1732292	external
https://www.cve.org/CVERecord?id=CVE-2019-12978	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12978	external
https://access.redhat.com/security/cve/CVE-2019-12979	self
https://bugzilla.redhat.com/show_bug.cgi?id=1732294	external
https://www.cve.org/CVERecord?id=CVE-2019-12979	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12979	external
https://access.redhat.com/security/cve/CVE-2019-13133	self
https://bugzilla.redhat.com/show_bug.cgi?id=1726078	external
https://www.cve.org/CVERecord?id=CVE-2019-13133	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13133	external
https://access.redhat.com/security/cve/CVE-2019-13134	self
https://bugzilla.redhat.com/show_bug.cgi?id=1726081	external
https://www.cve.org/CVERecord?id=CVE-2019-13134	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13134	external
https://access.redhat.com/security/cve/CVE-2019-13135	self
https://bugzilla.redhat.com/show_bug.cgi?id=1726104	external
https://www.cve.org/CVERecord?id=CVE-2019-13135	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13135	external
https://access.redhat.com/security/cve/CVE-2019-13295	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730604	external
https://www.cve.org/CVERecord?id=CVE-2019-13295	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13295	external
https://access.redhat.com/security/cve/CVE-2019-13297	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730596	external
https://www.cve.org/CVERecord?id=CVE-2019-13297	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13297	external
https://access.redhat.com/security/cve/CVE-2019-13300	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730580	external
https://www.cve.org/CVERecord?id=CVE-2019-13300	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13300	external
https://access.redhat.com/security/cve/CVE-2019-13301	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730575	external
https://www.cve.org/CVERecord?id=CVE-2019-13301	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13301	external
https://access.redhat.com/security/cve/CVE-2019-13304	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730364	external
https://www.cve.org/CVERecord?id=CVE-2019-13304	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13304	external
https://access.redhat.com/security/cve/CVE-2019-13305	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730361	external
https://www.cve.org/CVERecord?id=CVE-2019-13305	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13305	external
https://access.redhat.com/security/cve/CVE-2019-13306	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730357	external
https://www.cve.org/CVERecord?id=CVE-2019-13306	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13306	external
https://access.redhat.com/security/cve/CVE-2019-13307	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730351	external
https://www.cve.org/CVERecord?id=CVE-2019-13307	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13307	external
https://access.redhat.com/security/cve/CVE-2019-13309	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730337	external
https://www.cve.org/CVERecord?id=CVE-2019-13309	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13309	external
https://access.redhat.com/security/cve/CVE-2019-13310	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730333	external
https://www.cve.org/CVERecord?id=CVE-2019-13310	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13310	external
https://access.redhat.com/security/cve/CVE-2019-13311	self
https://bugzilla.redhat.com/show_bug.cgi?id=1730329	external
https://www.cve.org/CVERecord?id=CVE-2019-13311	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13311	external
https://access.redhat.com/security/cve/CVE-2019-13454	self
https://bugzilla.redhat.com/show_bug.cgi?id=1728474	external
https://www.cve.org/CVERecord?id=CVE-2019-13454	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13454	external
https://access.redhat.com/security/cve/CVE-2019-14980	self
https://bugzilla.redhat.com/show_bug.cgi?id=1757779	external
https://www.cve.org/CVERecord?id=CVE-2019-14980	external
https://nvd.nist.gov/vuln/detail/CVE-2019-14980	external
https://access.redhat.com/security/cve/CVE-2019-14981	self
https://bugzilla.redhat.com/show_bug.cgi?id=1757911	external
https://www.cve.org/CVERecord?id=CVE-2019-14981	external
https://nvd.nist.gov/vuln/detail/CVE-2019-14981	external
https://access.redhat.com/security/cve/CVE-2019-15139	self
https://bugzilla.redhat.com/show_bug.cgi?id=1767812	external
https://www.cve.org/CVERecord?id=CVE-2019-15139	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15139	external
https://access.redhat.com/security/cve/CVE-2019-15140	self
https://bugzilla.redhat.com/show_bug.cgi?id=1767828	external
https://www.cve.org/CVERecord?id=CVE-2019-15140	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15140	external
https://access.redhat.com/security/cve/CVE-2019-15141	self
https://bugzilla.redhat.com/show_bug.cgi?id=1767802	external
https://www.cve.org/CVERecord?id=CVE-2019-15141	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15141	external
https://access.redhat.com/security/cve/CVE-2019-16708	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801665	external
https://www.cve.org/CVERecord?id=CVE-2019-16708	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16708	external
https://access.redhat.com/security/cve/CVE-2019-16709	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801661	external
https://www.cve.org/CVERecord?id=CVE-2019-16709	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16709	external
https://access.redhat.com/security/cve/CVE-2019-16710	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801667	external
https://www.cve.org/CVERecord?id=CVE-2019-16710	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16710	external
https://access.redhat.com/security/cve/CVE-2019-16711	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801673	external
https://www.cve.org/CVERecord?id=CVE-2019-16711	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16711	external
https://access.redhat.com/security/cve/CVE-2019-16712	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801674	external
https://www.cve.org/CVERecord?id=CVE-2019-16712	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16712	external
https://access.redhat.com/security/cve/CVE-2019-16713	self
https://bugzilla.redhat.com/show_bug.cgi?id=1801681	external
https://www.cve.org/CVERecord?id=CVE-2019-16713	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16713	external
https://access.redhat.com/security/cve/CVE-2019-17540	self
https://bugzilla.redhat.com/show_bug.cgi?id=1765330	external
https://www.cve.org/CVERecord?id=CVE-2019-17540	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17540	external
https://access.redhat.com/security/cve/CVE-2019-17541	self
https://bugzilla.redhat.com/show_bug.cgi?id=1767087	external
https://www.cve.org/CVERecord?id=CVE-2019-17541	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17541	external
https://access.redhat.com/security/cve/CVE-2019-19948	self
https://bugzilla.redhat.com/show_bug.cgi?id=1793177	external
https://www.cve.org/CVERecord?id=CVE-2019-19948	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19948	external
https://access.redhat.com/security/cve/CVE-2019-19949	self
https://bugzilla.redhat.com/show_bug.cgi?id=1792480	external
https://www.cve.org/CVERecord?id=CVE-2019-19949	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19949	external

Acknowledgments

Red Hat Product Security Riccardo Schirone

JSON

To clipboard

Loading 4.1 MB of JSON…

CVE-2019-13310 (GCVE-0-2019-13310)

Vulnerability from cvelistv5 – Published: 2019-07-05 00:53 – Updated: 2024-08-04 23:49

Summary

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1616	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick6/commi…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:24.395Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1616"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51"
          },
          {
            "name": "openSUSE-SU-2019:1983",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-14T17:07:12.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1616"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51"
        },
        {
          "name": "openSUSE-SU-2019:1983",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13310",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1616",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1616"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51"
            },
            {
              "name": "openSUSE-SU-2019:1983",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13310",
    "datePublished": "2019-07-05T00:53:57.000Z",
    "dateReserved": "2019-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:24.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13311 (GCVE-0-2019-13311)

Vulnerability from cvelistv5 – Published: 2019-07-05 00:54 – Updated: 2024-08-04 23:49

Summary

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1623	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick6/commi…	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2020/dsa-4712	vendor-advisoryx_refsource_DEBIAN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:24.587Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1623"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/4a334bbf5584de37c6f5a47c380a531c8c4b140a"
          },
          {
            "name": "openSUSE-SU-2019:1983",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-01T11:06:07.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1623"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/4a334bbf5584de37c6f5a47c380a531c8c4b140a"
        },
        {
          "name": "openSUSE-SU-2019:1983",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13311",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1623",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1623"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/4a334bbf5584de37c6f5a47c380a531c8c4b140a",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/4a334bbf5584de37c6f5a47c380a531c8c4b140a"
            },
            {
              "name": "openSUSE-SU-2019:1983",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13311",
    "datePublished": "2019-07-05T00:54:05.000Z",
    "dateReserved": "2019-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:24.587Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13454 (GCVE-0-2019-13454)

Vulnerability from cvelistv5 – Published: 2019-07-09 16:07 – Updated: 2025-03-04 18:54

Summary

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1629
https://github.com/ImageMagick/ImageMagick/commit…
https://github.com/ImageMagick/ImageMagick6/commi…
http://www.securityfocus.com/bid/109099	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://usn.ubuntu.com/4192-1/	vendor-advisory
https://www.debian.org/security/2020/dsa-4712	vendor-advisory
https://lists.debian.org/debian-lts-announce/2020…	mailing-list
https://github.com/ImageMagick/ImageMagick/blob/7…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:25.072Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1629"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4"
          },
          {
            "name": "109099",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/109099"
          },
          {
            "name": "openSUSE-SU-2019:1983",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          },
          {
            "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-04T18:54:17.832Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1629"
        },
        {
          "url": "https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8"
        },
        {
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4"
        },
        {
          "name": "109099",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/109099"
        },
        {
          "name": "openSUSE-SU-2019:1983",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        },
        {
          "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
        },
        {
          "url": "https://github.com/ImageMagick/ImageMagick/blob/7.0.1-0/MagickCore/layer.c#L1618"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13454",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1629",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1629"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4"
            },
            {
              "name": "109099",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/109099"
            },
            {
              "name": "openSUSE-SU-2019:1983",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            },
            {
              "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13454",
    "datePublished": "2019-07-09T16:07:30.000Z",
    "dateReserved": "2019-07-09T00:00:00.000Z",
    "dateUpdated": "2025-03-04T18:54:17.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14980 (GCVE-0-2019-14980)

Vulnerability from cvelistv5 – Published: 2019-08-12 22:06 – Updated: 2024-08-05 00:34

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/ImageMagick/ImageMagick6/issues/43	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick6/commi…	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/compar…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:52.841Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/issues/43"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-17T18:07:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/issues/43"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-14980",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/issues/43",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/issues/43"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-14980",
    "datePublished": "2019-08-12T22:06:35.000Z",
    "dateReserved": "2019-08-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:52.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14981 (GCVE-0-2019-14981)

Vulnerability from cvelistv5 – Published: 2019-08-12 22:06 – Updated: 2024-08-05 00:34

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1552	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick6/commi…	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.debian.org/security/2020/dsa-4712	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:53.021Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1552"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc"
          },
          {
            "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          },
          {
            "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-19T01:06:18.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1552"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc"
        },
        {
          "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        },
        {
          "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-14981",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1552",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1552"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc"
            },
            {
              "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            },
            {
              "name": "[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-14981",
    "datePublished": "2019-08-12T22:06:50.000Z",
    "dateReserved": "2019-08-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:53.021Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15139 (GCVE-0-2019-15139)

Vulnerability from cvelistv5 – Published: 2019-08-18 18:31 – Updated: 2024-08-05 00:34

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1553	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2020/dsa-4712	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:53.341Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1553"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f7"
          },
          {
            "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          },
          {
            "name": "FEDORA-2019-f12cb1ddab",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/"
          },
          {
            "name": "FEDORA-2019-210b0a6e4f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          },
          {
            "name": "[debian-lts-announce] 20200907 [SECURITY] [DLA 2366-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-07T23:06:35.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1553"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f7"
        },
        {
          "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        },
        {
          "name": "FEDORA-2019-f12cb1ddab",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/"
        },
        {
          "name": "FEDORA-2019-210b0a6e4f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        },
        {
          "name": "[debian-lts-announce] 20200907 [SECURITY] [DLA 2366-1] imagemagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15139",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1553",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1553"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f7",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f7"
            },
            {
              "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            },
            {
              "name": "FEDORA-2019-f12cb1ddab",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/"
            },
            {
              "name": "FEDORA-2019-210b0a6e4f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            },
            {
              "name": "[debian-lts-announce] 20200907 [SECURITY] [DLA 2366-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15139",
    "datePublished": "2019-08-18T18:31:18.000Z",
    "dateReserved": "2019-08-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:53.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15140 (GCVE-0-2019-15140)

Vulnerability from cvelistv5 – Published: 2019-08-18 18:31 – Updated: 2024-08-05 00:34

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1554	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.debian.org/security/2020/dsa-4712	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2020/dsa-4715	vendor-advisoryx_refsource_DEBIAN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:53.318Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1554"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0"
          },
          {
            "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          },
          {
            "name": "DSA-4715",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4715"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-03T11:06:05.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1554"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0"
        },
        {
          "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        },
        {
          "name": "DSA-4715",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4715"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1554",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1554"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0"
            },
            {
              "name": "[debian-lts-announce] 20191021 [SECURITY] [DLA 1968-1] imagemagick security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            },
            {
              "name": "DSA-4715",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4715"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15140",
    "datePublished": "2019-08-18T18:31:06.000Z",
    "dateReserved": "2019-08-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:53.318Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15141 (GCVE-0-2019-15141)

Vulnerability from cvelistv5 – Published: 2019-08-18 18:30 – Updated: 2024-08-05 00:42

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

4 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1560	x_refsource_MISC
https://github.com/ImageMagick/ImageMagick6/commi…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:42:03.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1560"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/3c53413eb544cc567309b4c86485eae43e956112"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-17T18:07:12.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1560"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/3c53413eb544cc567309b4c86485eae43e956112"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15141",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1560",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1560"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick6/commit/3c53413eb544cc567309b4c86485eae43e956112",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick6/commit/3c53413eb544cc567309b4c86485eae43e956112"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15141",
    "datePublished": "2019-08-18T18:30:56.000Z",
    "dateReserved": "2019-08-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:42:03.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-16708 (GCVE-0-2019-16708)

Vulnerability from cvelistv5 – Published: 2019-09-23 11:46 – Updated: 2024-08-05 01:17

Summary

ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

5 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1531	x_refsource_MISC
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.debian.org/security/2020/dsa-4712	vendor-advisoryx_refsource_DEBIAN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:17:41.106Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          },
          {
            "name": "DSA-4712",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4712"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-01T11:06:17.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        },
        {
          "name": "DSA-4712",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4712"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16708",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1531",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            },
            {
              "name": "DSA-4712",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4712"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16708",
    "datePublished": "2019-09-23T11:46:19.000Z",
    "dateReserved": "2019-09-23T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:17:41.106Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-16709 (GCVE-0-2019-16709)

Vulnerability from cvelistv5 – Published: 2019-09-23 11:46 – Updated: 2024-08-05 01:17

Summary

ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/issues/1531	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4192-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:17:41.179Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
          },
          {
            "name": "openSUSE-SU-2019:2317",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00045.html"
          },
          {
            "name": "openSUSE-SU-2019:2321",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00046.html"
          },
          {
            "name": "USN-4192-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4192-1/"
          },
          {
            "name": "openSUSE-SU-2019:2515",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-17T18:07:05.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
        },
        {
          "name": "openSUSE-SU-2019:2317",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00045.html"
        },
        {
          "name": "openSUSE-SU-2019:2321",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00046.html"
        },
        {
          "name": "USN-4192-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4192-1/"
        },
        {
          "name": "openSUSE-SU-2019:2515",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16709",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/1531",
              "refsource": "MISC",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/1531"
            },
            {
              "name": "openSUSE-SU-2019:2317",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00045.html"
            },
            {
              "name": "openSUSE-SU-2019:2321",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00046.html"
            },
            {
              "name": "USN-4192-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4192-1/"
            },
            {
              "name": "openSUSE-SU-2019:2515",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:2519",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16709",
    "datePublished": "2019-09-23T11:46:10.000Z",
    "dateReserved": "2019-09-23T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:17:41.179Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2020:1180

CVE-2019-13310 (GCVE-0-2019-13310)

CVE-2019-13311 (GCVE-0-2019-13311)

CVE-2019-13454 (GCVE-0-2019-13454)

CVE-2019-14980 (GCVE-0-2019-14980)

CVE-2019-14981 (GCVE-0-2019-14981)

CVE-2019-15139 (GCVE-0-2019-15139)

CVE-2019-15140 (GCVE-0-2019-15140)

CVE-2019-15141 (GCVE-0-2019-15141)

CVE-2019-16708 (GCVE-0-2019-16708)

CVE-2019-16709 (GCVE-0-2019-16709)

Tags

Sightings

Nomenclature