DeutschShown in its original language — a full translation is planned for a future version.
ImageMagick: Mehrere Schwachstellen
view advisory published 2019-06-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder weitere Angriffe mit nicht beschriebenen Auswirkungen durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12979US | high7.8 | — | ||
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c. | ||||
| CVE-2019-12978US | high7.8 | — | ||
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. | ||||
| CVE-2019-12977US | high7.8 | — | ||
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. | ||||
| CVE-2019-12976US | medium5.5 | — | ||
ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c. | ||||
| CVE-2019-12975US | medium5.5 | — | ||
ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c. | ||||
| CVE-2019-12974US | medium5.5 | — | ||
A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2020:1180 vom 2020-03-31external
- Amazon Linux Security Advisory ALAS-2023-1810 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2023-1811 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2023-1812 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2023-1813 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2023-1814 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2023-1815 vom 2023-08-23external
- Amazon Linux Security Advisory ALAS-2024-1926 vom 2024-03-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan