CVE-2018-6405: Medium severity ImageMagick vulnerability
Published Jan 30, 2018
·Updated
In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0 ...
Affected Software
7 affected componentsFixes available
ImageMagick<6.9.9-35
ImageMagick>=7.0.0-0<7.0.7-23
Ubuntu Linux=14.04
Ubuntu Linux=16.04
Ubuntu Linux=17.10
Ubuntu Linux=18.04
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u5Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:7.1.1.43+dfsg1-1Fixed in 8:7.1.1.47+dfsg1-1 - Upgrade
Upgrade
ImageMagick coders/dcm.c (ReadDCMImage)to a version that resolves this vulnerability.Fixed in 7.0.7-23
Event History
Jan 30, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:09 PM
Description
Sep 15, 2024
Data Sourced
via Ubuntu·10:51 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-6405.
2
What is the severity of CVE-2018-6405?
The severity of CVE-2018-6405 is medium with a severity value of 6.5.
3
Which software is affected by CVE-2018-6405?
ImageMagick versions before 7.0.7-23 are affected by CVE-2018-6405.
4
How can an attacker exploit this vulnerability?
Remote attackers can cause a denial of service by exploiting the memory leak in the affected versions of ImageMagick.
5
What is the remedy for CVE-2018-6405?
Upgrade ImageMagick to version 7.0.7-23 or higher to fix CVE-2018-6405.