Linux · Ubuntu · Package update · May 31, 2018

libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2: libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2 for Ubuntu 18.04.6 LTS (bionic)

libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2, released May 31, 2018, fixes 102 CVEs in libimage-magick-perl. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
102
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.1919
97th percentile

Priority of the 102 CVEs

Patch now 0 Urgent 0 High 0 Routine 102

Fixed package versions

ProductReleaseFixed in
libimage-magick-perlUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-15277 imagemagick: ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when p...n/a 0.1919 None reported
Routine CVE-2018-8960 libmagickcore-6-headers: The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation,...n/a 0.0425 None reported
Routine CVE-2017-18029 imagemagick: In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, whic...n/a 0.0416 None reported
Routine CVE-2017-14224 imagemagick-6-common: A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to c...n/a 0.0402 None reported
Routine CVE-2017-18211 imagemagick: In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magic...n/a 0.0379 None reported
Routine CVE-2018-5246 libimage-magick-perl: In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.n/a 0.0369 None reported
Routine CVE-2018-5357 libimage-magick-q16hdri-perl: ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.n/a 0.0369 None reported
Routine CVE-2018-8804 imagemagick: WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (Magic...n/a 0.0363 None reported
Routine CVE-2018-5248 imagemagick: In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function,...n/a 0.0354 None reported
Routine CVE-2018-7443 imagemagick: The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of imag...n/a 0.0323 None reported
Routine CVE-2017-17499 libmagickcore-6.q16hdri-3-extra: ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image...n/a 0.0322 None reported
Routine CVE-2017-14624 imagemagick-6.q16: ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in cod...n/a 0.0318 None reported
Routine CVE-2017-14625 imagemagick: ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/si...n/a 0.0318 None reported
Routine CVE-2018-9133 imagemagick: ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c),...n/a 0.0317 None reported
Routine CVE-2018-10177 imagemagick: In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c filen/a 0.0307 None reported
Routine CVE-2017-12692 imagemagick: The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of servi...n/a 0.0305 None reported
Routine CVE-2017-18027 imagemagick: In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which...n/a 0.0305 None reported
Routine CVE-2017-14739 imagemagick: The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed mem...n/a 0.0301 None reported
Routine CVE-2017-17682 imagemagick: In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c,...n/a 0.0298 None reported
Routine CVE-2017-17681 imagemagick: In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd...n/a 0.0298 None reported
Routine CVE-2017-12693 imagemagick: The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service...n/a 0.0291 None reported
Routine CVE-2017-17879 imagemagick: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/pn...n/a 0.0289 None reported
Routine CVE-2017-18209 imagemagick: In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vul...n/a 0.0286 None reported
Routine CVE-2017-1000476 imagemagick: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which...n/a 0.0285 None reported
Routine CVE-2017-15281 imagemagick: ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application...n/a 0.0273 None reported
Showing 1 to 25 of 102 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.