PT-2017-12933 · Imagemagick+2 · Imagemagick+2

Bastien Roucaries · Publicado 2017-08-22 · Atualizado 2020-10-14 · CVE-2017-13146

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.8-5 ImageMagick versions 7.x prior to 7.0.5-6

Description There is a memory leak in the ReadMATImage function in coders/mat.c.

Recommendations For versions prior to 6.9.8-5, update to version 6.9.8-5 or later. For versions 7.x prior to 7.0.5-6, update to version 7.0.5-6 or later.

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

ALT-PU-2017-2096

CVE-2017-13146

DLA-1081-1

SUSE-SU-2018:0130-1

SUSE-SU-2018:0132-1

Produtos afetados

Alt Linux

Imagemagick

Suse

Referências · 139

• https://github.com/ImageMagick/ImageMagick/issues/526 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/506 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/591 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/519 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/596 · Nota
• https://github.com/ImageMagick/ImageMagick/commit/79e5dbcdd1fc2f714f9bae548bc55d5073f3ed20 · Aviso do Fabricante
• https://github.com/ImageMagick/ImageMagick/issues/271 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/586 · Nota
• https://bdu.fstec.ru/vul/2017-01776 · Nota de Segurança
• https://bugzilla.suse.com/1047898 · Nota
• https://bdu.fstec.ru/vul/2017-01779 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13139 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-01460 · Nota de Segurança
• https://bugzilla.suse.com/1047044 · Nota
• https://bugzilla.suse.com/1072902 · Nota