DSA-4019: -1 imagemagick -- security update

Published Nov 5, 2017

Updated

imagemagick - security update

Other sources

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed.

Affected Software

2 affected components

debian/imagemagick

Event History

Nov 5, 2017

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is exposed to these vulnerabilities?

Systems using Debian's ImageMagick package are exposed when they process malformed image files. The stated impacts include denial of service, memory disclosure, and arbitrary code execution.

What does an attacker need to exploit the issue?

An attacker needs to cause a vulnerable ImageMagick installation to process a malformed image file. The available information does not specify a required authentication level or delivery mechanism.

DSA-4019: -1 imagemagick -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to these vulnerabilities?

What does an attacker need to exploit the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to these vulnerabilities?

What does an attacker need to exploit the issue?