Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

SUSE: 2018:3191-1 Moderate: ImageMagick DoS and Memory Leak Fixes

suse
Calendar Grey October 17, 2018
Dist Suse Esm H88
SUSE Security Patch for ImageMagick addresses 7 vulnerabilities concerning denial of service and memory leaks. Upgrade promptly to bolster system protection.
An update that fixes 7 vulnerabilities is now available

Summary

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. (bsc#1111069) - CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072). - CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747). - CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746). - CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098545) - CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098546) Patch Instructions:

Topics%20covered

Topics Covered

security advisory moderate denial of service memory leak SUSE ImageMagick out of bounds write

References

#1098545 #1098546 #1110746 #1110747 #1111069

#1111072

Cross- CVE-2017-13058 CVE-2018-12599 CVE-2018-12600

CVE-2018-17965 CVE-2018-17966 CVE-2018-18016

CVE-2018-18024

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP3

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2017-13058.html

https://www.suse.com/security/cve/CVE-2018-12599.html

https://www.suse.com/security/cve/CVE-2018-12600.html

https://www.suse.com/security/cve/CVE-2018-17965.html

https://www.suse.com/security/cve/CVE-2018-17966.html

https://www.suse.com/security/cve/CVE-2018-18016.html

https://www.suse.com/security/cve/CVE-2018-18024.html

Announcement ID: SUSE-SU-2018:3191-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service memory leak SUSE ImageMagick out of bounds write

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.