PT-2019-13147 · Imagemagick+3 · Imagemagick+3

Yangy-Xiao · Publicado 2019-07-01 · Atualizado 2024-06-15 · CVE-2019-13134

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.8-50

Description The issue is related to a memory leak in the function ReadVIFFImage in coders/viff.c.

Recommendations For versions prior to 7.0.8-50, update to version 7.0.8-50 or later to resolve the issue.

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CESA-2020_1180

CVE-2019-13134

OPENSUSE-SU-2019:1983-1

OPENSUSE-SU-2019_1983-1

OPENSUSE-SU-2024:11564-1

RHSA-2020:1180

RHSA-2020_1180

SUSE-SU-2019:2010-1

SUSE-SU-2019:2106-1

Produtos afetados

Centos

Imagemagick

Red Hat

Suse

Referências · 99

• https://github.com/ImageMagick/ImageMagick/commit/fe3066122ef72c82415811d25e9e3fad622c0a99 · Correção
• https://github.com/ImageMagick/ImageMagick/issues/1600 · Correção
• https://ubuntu.com/security/CVE-2019-13134 · Aviso do Fabricante
• https://bugzilla.suse.com/1140666 · Nota
• https://suse.com/security/cve/CVE-2019-12976 · Nota
• https://suse.com/security/cve/CVE-2019-13295 · Nota
• https://suse.com/security/cve/CVE-2019-13309 · Nota
• https://bugzilla.suse.com/1140549 · Nota
• https://bugzilla.suse.com/1140669 · Nota
• https://suse.com/security/cve/CVE-2019-11007 · Nota
• https://suse.com/security/cve/CVE-2019-12978 · Nota
• https://bugzilla.suse.com/1140545 · Nota
• https://suse.com/security/cve/CVE-2019-13136 · Nota
• https://bugzilla.suse.com/1140668 · Nota
• https://suse.com/security/cve/CVE-2019-15139 · Nota