CVE-2018-16645
imagemagick-common: There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coder...
CVE-2018-16645 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4, released September 8, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0321
88th percentile
There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |