Test Kennung:	1.3.6.1.4.1.25623.1.0.851942
Kategorie:	SuSE Local Security Checks
Titel:	openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:3225-1)
Zusammenfassung:	The remote host is missing an update for the 'ImageMagick'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ImageMagick' package(s) announced via the referenced advisory. Vulnerability Insight: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. (bsc#1111069) - CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072). - CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747). - CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746). - CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098545) - CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098546) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1197=1 Affected Software/OS: ImageMagick on openSUSE Leap 42.3 Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13058 Common Vulnerability Exposure (CVE) ID: CVE-2018-12599 Common Vulnerability Exposure (CVE) ID: CVE-2018-12600 Common Vulnerability Exposure (CVE) ID: CVE-2018-17965 Common Vulnerability Exposure (CVE) ID: CVE-2018-17966 Common Vulnerability Exposure (CVE) ID: CVE-2018-18016 Common Vulnerability Exposure (CVE) ID: CVE-2018-18024
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.