REDHAT-BUG-1561742: Low severity imagemagick vulnerability
An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
References: https://github.com/ImageMagick/ImageMagick/issues/802
Patches: https://github.com/ImageMagick/ImageMagick/commit/bb04ccb34fd45e9c3020786857fb79b09f44d7db https://github.com/ImageMagick/ImageMagick/commit/12f34b60564de1cbec08e23e2413dab5b64daeb7
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1561742?
REDHAT-BUG-1561742 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix REDHAT-BUG-1561742?
To mitigate REDHAT-BUG-1561742, update ImageMagick to the latest version where the issue has been resolved.
What does REDHAT-BUG-1561742 affect?
REDHAT-BUG-1561742 affects ImageMagick versions prior to the fix implemented for this vulnerability.
Can REDHAT-BUG-1561742 be exploited remotely?
Yes, attackers can exploit REDHAT-BUG-1561742 remotely by providing crafted files to an application that uses ImageMagick for processing.
Is there a patch available for REDHAT-BUG-1561742?
Yes, a patch addressing REDHAT-BUG-1561742 is available and should be applied to affected installations of ImageMagick.