PT-2018-14304 · Imagemagick+2 · Imagemagick+2

Jgj212 · Published 2018-10-03 · Updated 2020-04-08 · CVE-2018-17967

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-28

Description The issue is related to a memory leak in the ReadBGRImage function located in coders/bgr.c.

Recommendations For ImageMagick version 7.0.7-28, consider updating to a newer version that contains a fix for this memory leak issue.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CESA-2020_1180

CVE-2018-17967

RHSA-2020:1180

RHSA-2020_1180

Affected Products

Centos

Imagemagick

Red Hat

References · 288

• https://github.com/ImageMagick/ImageMagick/issues/1051 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16711 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11470 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19948 · Security Note
• https://bdu.fstec.ru/vul/2021-03589 · Security Note
• https://bdu.fstec.ru/vul/2019-02833 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16645 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13310 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11166 · Security Note
• https://bdu.fstec.ru/vul/2019-04349 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18273 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13305 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11656 · Security Note
• https://bdu.fstec.ru/vul/2019-02963 · Security Note
• https://bdu.fstec.ru/vul/2021-03548 · Security Note