CVE-2019-18853: Medium severity imagemagick vulnerability
Published Nov 11, 2019
·Updated
ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XMLPARSEHUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.
Affected Software
1 affected component
ImageMagick>=7.0.0-0<7.0.9-0
Remediation
Event History
Nov 11, 2019
CVE Published
via MITRE·02:36 PM
Data Sourced
via MITRE·02:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18853?
CVE-2019-18853 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2019-18853?
To fix CVE-2019-18853, update ImageMagick to version 7.0.9-0 or later.
3
What causes CVE-2019-18853?
CVE-2019-18853 is caused by improper restriction of XML_PARSE_HUGE in the coders/svg.c file.
4
Which versions of ImageMagick are affected by CVE-2019-18853?
ImageMagick versions before 7.0.9-0 are affected by CVE-2019-18853.
5
Can CVE-2019-18853 be exploited remotely?
Yes, CVE-2019-18853 can be exploited by remote attackers to cause a denial of service.