REDHAT-BUG-1581489: Low severity imagemagick vulnerability
In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call.
References: https://github.com/ImageMagick/ImageMagick/issues/910
Patch: https://github.com/ImageMagick/ImageMagick/commit/d95991f24d27dbc335dfa7c0523c886ab9329e9e
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1581489?
The severity of REDHAT-BUG-1581489 is classified as a moderate denial of service risk due to CPU exhaustion.
How do I fix REDHAT-BUG-1581489?
To fix REDHAT-BUG-1581489, update ImageMagick to the latest version that addresses the infinite loop vulnerability.
What causes the vulnerability identified in REDHAT-BUG-1581489?
REDHAT-BUG-1581489 is caused by an infinite loop in the ReadTXTImage function when processing a specially crafted image file.
Which versions of ImageMagick are affected by REDHAT-BUG-1581489?
ImageMagick versions prior to the patch addressing REDHAT-BUG-1581489 are affected, particularly version 7.0.7-16.
What is the impact of the REDHAT-BUG-1581489 vulnerability?
The impact of the REDHAT-BUG-1581489 vulnerability is denial of service (CPU exhaustion) affecting the performance and availability of the affected system.