REDHAT-BUG-1588170
First published: Wed Jun 06 2018(Updated: )
A flaw was found in ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file. References: <a href="https://github.com/ImageMagick/ImageMagick/issues/931">https://github.com/ImageMagick/ImageMagick/issues/931</a> Patch: <a href="https://github.com/ImageMagick/ImageMagick/commit/4da2cd650532ffd18fa11578fc2ec7c2467727bb">https://github.com/ImageMagick/ImageMagick/commit/4da2cd650532ffd18fa11578fc2ec7c2467727bb</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ImageMagick |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/ImageMagick/ImageMagick/issues/931
- https://github.com/ImageMagick/ImageMagick/commit/4da2cd650532ffd18fa11578fc2ec7c2467727bb
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1588171
- https://access.redhat.com/errata/RHSA-2020:1180
- https://access.redhat.com/security/cve/cve-2018-11656
- https://bugzilla.redhat.com/show_bug.cgi?id=1588170
Frequently Asked Questions
What is the severity of REDHAT-BUG-1588170?
REDHAT-BUG-1588170 is considered a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix REDHAT-BUG-1588170?
To fix REDHAT-BUG-1588170, upgrade ImageMagick to the latest version where the memory leak vulnerability has been addressed.
What type of vulnerability is REDHAT-BUG-1588170?
REDHAT-BUG-1588170 is classified as a memory leak vulnerability within ImageMagick.
Which versions of ImageMagick are affected by REDHAT-BUG-1588170?
REDHAT-BUG-1588170 affects ImageMagick version 7.0.7-20 Q16 x86_64.
What is the impact of REDHAT-BUG-1588170?
The impact of REDHAT-BUG-1588170 is that an attacker can exploit it to cause a denial of service via a crafted DCM image file.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-11656
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/imagemagick
- canonical/imagemagick