Linux · Ubuntu · Package update · September 8, 2018

imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4: imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4 for Ubuntu 18.04.6 LTS (bionic)

imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4, released September 8, 2018, fixes 13 CVEs in imagemagick. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.4889
98th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 0 Routine 13

Fixed package versions

ProductReleaseFixed in
imagemagickUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.4

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-16323 imagemagick: ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that...n/a 0.4889 None reported
Routine CVE-2018-14551 imagemagick: The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory...n/a 0.0403 None reported
Routine CVE-2018-16644 imagemagick: There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c...n/a 0.0365 None reported
Routine CVE-2018-16645 imagemagick-common: There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coder...n/a 0.0321 None reported
Routine CVE-2018-16643 imagemagick: The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPIC...n/a 0.0308 None reported
Routine CVE-2018-16642 imagemagick: The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service v...n/a 0.0304 None reported
Routine CVE-2018-16750 libimage-magick-perl: In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.n/a 0.0291 None reported
Routine CVE-2018-14434 libmagickwand-6.q16hdri-3: ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.n/a 0.0277 None reported
Routine CVE-2018-16640 libmagickwand-6-headers: ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.n/a 0.0255 None reported
Routine CVE-2018-16749 imagemagick: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to ca...n/a 0.0231 None reported
Routine CVE-2018-14435 libmagickcore-6.q16hdri-3: ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.n/a 0.0211 None reported
Routine CVE-2018-14436 libimage-magick-q16hdri-perl: ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.n/a 0.0211 None reported
Routine CVE-2018-14437 imagemagick: ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.n/a 0.0210 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.