Debian Imagemagick vulnerabilities

CVE-2020-25664 [MEDIUM] CVE-2020-25664: imagemagick - In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to Acqu... In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with

CVE-2018-13153 [MEDIUM] CVE-2018-13153: imagemagick - In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in... In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2017-18027 [MEDIUM] CVE-2017-18027: imagemagick - In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the functio... In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fix

CVE-2018-16750 [MEDIUM] CVE-2018-16750: imagemagick - In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer f... In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. Scope: local bookworm: resolved (fixed in 8:6.9.10.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.10.2+dfsg-2) forky: resolved (fixed in 8:6.9.10.2+dfsg-2) sid: resolved (fixed in 8:6.9.10.2+dfsg-2) trixie: resolved (fixed in 8:6.9.10.2+dfsg-2)

CVE-2015-8958 [MEDIUM] CVE-2015-8958: imagemagick - coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause... coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (fixed in 8:6.9.6.2+dfsg-2) tri

CVE-2019-13311 [MEDIUM] CVE-2019-13311: imagemagick - ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wa... ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2019-13301 [MEDIUM] CVE-2019-13301: imagemagick - ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an A... ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2017-17680 [MEDIUM] CVE-2017-17680: imagemagick - In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the functi... In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved

CVE-2017-14528 [MEDIUM] CVE-2017-14528: imagemagick - The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect... The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file. Scope: local bookworm

CVE-2018-16640 [MEDIUM] CVE-2018-16640: imagemagick - ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGIm... ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2017-12875 [MEDIUM] CVE-2017-12875: imagemagick - The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attacker... The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved

CVE-2017-11505 [MEDIUM] CVE-2017-11505: imagemagick - The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and ... The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-

CVE-2016-10060 [MEDIUM] CVE-2016-10060: imagemagick - The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before ... The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resol

CVE-2017-12432 [MEDIUM] CVE-2017-12432: imagemagick - In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the funct... In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-16) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-16) forky: resolved (fixed in 8:6.9.7.4+dfsg-16) sid: resolved (fixed in 8:6.9.7.4+dfsg-16

CVE-2015-8901 [MEDIUM] CVE-2015-8901: imagemagick - ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of... ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-6) bullseye: resolved (fixed in 8:6.8.9.9-6) forky: resolved (fixed in 8:6.8.9.9-6) sid: resolved (fixed in 8:6.8.9.9-6) trixie: resolved (fixed in 8:6.8.9.9-6)

CVE-2015-8902 [MEDIUM] CVE-2015-8902: imagemagick - The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta... The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-6) bullseye: resolved (fixed in 8:6.8.9.9-6) forky: resolved (fixed in 8:6.8.9.9-6) sid: resolved (fixed in 8:6.8.9.9-6) trixie: resolved

CVE-2017-12691 [MEDIUM] CVE-2017-12691: imagemagick - The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote a... The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie

CVE-2017-18252 [MEDIUM] CVE-2017-18252: imagemagick - An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in M... An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed i

CVE-2019-13137 [MEDIUM] CVE-2019-13137: imagemagick - ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function Read... ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2017-11528 [MEDIUM] CVE-2017-11528: imagemagick - The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x ... The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12) sid: resolved (fixed in 8: