CVE-2018-5358: Medium severity ImageMagick vulnerability
ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u5Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:7.1.1.43+dfsg1-1Fixed in 8:7.1.1.47+dfsg1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5358?
The severity of CVE-2018-5358 is medium with a CVSS score of 6.5.
How does CVE-2018-5358 affect ImageMagick?
CVE-2018-5358 affects ImageMagick version 7.0.7-22 Q16 and earlier versions.
What is the remedy for CVE-2018-5358 in Ubuntu?
The recommended remedy for CVE-2018-5358 in Ubuntu is to update ImageMagick to version 8:6.9.7.4+dfsg-16ubuntu2.2 or later.
What is the remedy for CVE-2018-5358 in Canonical Ubuntu Linux 14.04 LTS?
The recommended remedy for CVE-2018-5358 in Canonical Ubuntu Linux 14.04 LTS is to update ImageMagick.
Where can I find more information about CVE-2018-5358?
You can find more information about CVE-2018-5358 on the GitHub page and the Ubuntu Security Notice page.