PT-2018-2695 · Imagemagick+4 · Imagemagick+4

Publicado

2018-08-06

·

Atualizado

2020-04-08

·

CVE-2018-16642

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-37
Description The issue is related to the InsertRow function in ImageMagick, which is vulnerable to an out-of-bounds write. This can be exploited by a remote attacker using a specially crafted image file, potentially leading to a denial of service. The InsertRow function in coders/cut.c is specifically affected.
Recommendations For ImageMagick version 7.0.7-37, consider disabling the InsertRow function as a temporary workaround until a patch is available. Restrict access to the coders/cut.c module to minimize the risk of exploitation. Avoid using the affected function with untrusted image files until the issue is resolved.

Correção

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2019-01369
CESA-2020_1180
CVE-2018-16642
DLA-1530-1
DSA-4316-1
MGASA-2018-0496
OPENSUSE-SU-2018_3014-1
OPENSUSE-SU-2018_3203-1
RHSA-2020:1180
RHSA-2020_1180
SUSE-SU-2018:2977-1
SUSE-SU-2018:3095-1
SUSE-SU-2018:3269-1
SUSE-SU-2018:3348-1
USN-3785-1

Produtos afetados

Centos
Imagemagick
Red Hat
Suse
Ubuntu