REDHAT-BUG-1378764: Low severity imagemagick vulnerability

Published Sep 23, 2016

Updated

Bug report(s):

https://github.com/ImageMagick/ImageMagick/issues/109 https://bugs.launchpad.net/bugs/1539066

Upstream patch(es):

https://github.com/ImageMagick/ImageMagick/commit/4f2c04ea6673863b87ac7f186cbb0d911f74085c

CVE assignment:

http://seclists.org/oss-sec/2016/q3/590

Affected Software

1 affected component

ImageMagick

Event History

Sep 23, 2016

Data Sourced

via Red Hat·08:54 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1378764?

The severity of REDHAT-BUG-1378764 is categorized as a moderate vulnerability that can lead to potential denial of service.

How do I fix REDHAT-BUG-1378764?

To fix REDHAT-BUG-1378764, apply the latest patches provided by the ImageMagick maintainers.

Which software versions are affected by REDHAT-BUG-1378764?

REDHAT-BUG-1378764 affects various versions of ImageMagick prior to the latest upstream patch.

How can I determine if my system is vulnerable to REDHAT-BUG-1378764?

You can determine if your system is vulnerable to REDHAT-BUG-1378764 by checking the installed version of ImageMagick against the patched versions available.

What is the impact of not addressing REDHAT-BUG-1378764?

Not addressing REDHAT-BUG-1378764 may result in service interruptions or crashes when processing specific image files.