PT-2019-14784 · Imagemagick+4 · Imagemagick+4

Butterflyhack

·

Publicado

2019-09-23

·

Atualizado

2024-10-03

·

CVE-2019-16709

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-35
Description The issue is related to a memory leak in the coders/dps.c file, which can be demonstrated through the XCreateImage function.
Recommendations For ImageMagick version 7.0.8-35, consider restricting access to the coders/dps.c file or the XCreateImage function as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Memory Leak

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CESA-2020_1180
CVE-2019-16709
MGASA-2019-0372
OPENSUSE-SU-2019:2317-1
OPENSUSE-SU-2019:2321-1
OPENSUSE-SU-2019:2515-1
OPENSUSE-SU-2019:2519-1
OPENSUSE-SU-2019_2317-1
OPENSUSE-SU-2019_2515-1
OPENSUSE-SU-2019_2519-1
RHSA-2020:1180
RHSA-2020_1180
SUSE-SU-2019:2785-1
SUSE-SU-2019:2785-2
SUSE-SU-2019:2896-1
USN-4192-1
USN-7053-1

Produtos afetados

Centos
Imagemagick
Red Hat
Suse
Ubuntu