CVE-2018-5246: Medium severity ImageMagick ImageMagick vulnerability
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u5Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:7.1.1.43+dfsg1-1Fixed in 8:7.1.1.47+dfsg1-1 - Upgrade
Upgrade
alpine/imagemagick6to a version that resolves this vulnerability.Fixed in 6.9.10.37-r0 - Upgrade
Upgrade
alpine/imagemagick6to a version that resolves this vulnerability.Fixed in 6.9.10.39-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-5246.
What is the affected software?
The affected software includes ImageMagick version 7.0.7-17 Q16 and various versions of Ubuntu and Debian.
What is the severity of CVE-2018-5246?
The severity of CVE-2018-5246 is medium with a CVSS score of 6.5.
What is the potential impact of this vulnerability?
This vulnerability could lead to memory leaks in ImageMagick, which may cause performance issues or enable attackers to execute arbitrary code.
How can I fix CVE-2018-5246?
To fix CVE-2018-5246, you should update ImageMagick to a version that includes the necessary security patches.