REDHAT-BUG-1627916: Low severity imagemagick vulnerability
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
Upstream issue:
https://github.com/ImageMagick/ImageMagick/issues/1119
Upstream patch:
https://github.com/ImageMagick/ImageMagick6/commit/1007b98f8795ad4bea6bc5f68a32d83e982fdae4
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1627916?
The severity of REDHAT-BUG-1627916 is considered significant due to its potential to cause denial of service.
How do I fix REDHAT-BUG-1627916?
To fix REDHAT-BUG-1627916, upgrade ImageMagick to a version later than 7.0.7-29 where the vulnerability has been addressed.
What causes the vulnerability in REDHAT-BUG-1627916?
The vulnerability in REDHAT-BUG-1627916 is caused by a missing NULL check in ReadOneJNGImage in coders/png.c.
Which versions of ImageMagick are affected by REDHAT-BUG-1627916?
ImageMagick versions up to and including 7.0.7-29 are affected by REDHAT-BUG-1627916.
What kind of impact does REDHAT-BUG-1627916 have on systems?
REDHAT-BUG-1627916 can lead to application crashes and denial of service due to WriteBlob assertion failures.