Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 596
Alerts This Week
Warning Icon 1 596

SUSE: 2018:3095-1 Moderate: ImageMagick Denial Of Service Patch

suse
Calendar Grey October 11, 2018
Dist Suse Esm H88
SUSE has released a Security Update for OpenSSL addressing 12 security flaws while streamlining the application’s performance through an effective upgrade strategy.
An update that solves 9 vulnerabilities and has one errata is now available

Summary

This update for ImageMagick fixes the following security issues: - CVE-2017-11532: Prevent a memory leak vulnerability in the WriteMPCImage() function in coders/mpc.c via a crafted file allowing for DoS (bsc#1050129) - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function (bsc#1108283) - CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file (bsc#1108282) - CVE-2018-16642: The function InsertRow allowed remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write (bsc#1107616) - CVE-2018-16640: Prevent memory leak in the function ReadOneJNGImage (bsc#1107619)

Topics%20covered

Topics Covered

security advisory moderate denial of service ImageMagick SUSE Linux Enterprise

References

#1050129 #1105592 #1106989 #1107604 #1107609

#1107612 #1107616 #1107619 #1108282 #1108283

Cross- CVE-2017-11532 CVE-2018-16413 CVE-2018-16640

CVE-2018-16642 CVE-2018-16643 CVE-2018-16644

CVE-2018-16645 CVE-2018-16749 CVE-2018-16750

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP3

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2017-11532.html

https://www.suse.com/security/cve/CVE-2018-16413.html

https://www.suse.com/security/cve/CVE-2018-16640.html

https://www.suse.com/security/cve/CVE-2018-16642.html

https://www.suse.com/security/cve/CVE-2018-16643.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:3095-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service ImageMagick SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.