WID-SEC-W-2023-2133

DeutschShown in its original language — a full translation is planned for a future version.

ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2019-09-24

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-16713US	medium6.5	2.48% (85th)	—	2019-09-23
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
CVE-2019-16712US	medium6.5	2.61% (85th)	—	2019-09-23
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
CVE-2019-16711US	medium6.5	2.48% (85th)	—	2019-09-23
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
CVE-2019-16710US	medium6.5	2.48% (85th)	—	2019-09-23
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
CVE-2019-16709US	medium6.5	2.81% (86th)	—	2019-09-23
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
CVE-2019-16708US	medium6.5	2.48% (85th)	—	2019-09-23
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.