Test Kennung:	1.3.6.1.4.1.25623.1.0.890960
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for imagemagick (DLA-960-1)
Zusammenfassung:	This update fixes several vulnerabilities in imagemagick: Various memory;handling problems and cases of missing or incomplete input sanitising;may result in denial of service, memory disclosure, or the execution of;arbitrary code if malformed PCX, DCM, JPEG, PSD, HDR, MIFF, PDB, VICAR,;SGI, SVG, AAI, MNG, EXR, MAT, SFW, JNG, PCD, XWD, PICT, BMP, MTV, SUN,;EPT, ICON, DDS, or ART files are processed.
Beschreibung:	Summary: This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure, or the execution of arbitrary code if malformed PCX, DCM, JPEG, PSD, HDR, MIFF, PDB, VICAR, SGI, SVG, AAI, MNG, EXR, MAT, SFW, JNG, PCD, XWD, PICT, BMP, MTV, SUN, EPT, ICON, DDS, or ART files are processed. Affected Software/OS: imagemagick on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 6.7.7.10-5+deb7u14. We recommend that you upgrade your imagemagick packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8354 BugTraq ID: 70830 http://www.securityfocus.com/bid/70830 http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html https://int21.de/cve/CVE-2014-8354-ImageMagick-oob-heap-overflow.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8355 BugTraq ID: 70839 http://www.securityfocus.com/bid/70839 https://int21.de/cve/CVE-2014-8355-ImageMagick-pcx-oob-heap-overflow.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8562 BugTraq ID: 70837 http://www.securityfocus.com/bid/70837 https://int21.de/cve/CVE-2014-8562-ImageMagick-dcm-oob-heap-overflow.html https://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8716 BugTraq ID: 70992 http://www.securityfocus.com/bid/70992 http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456 Common Vulnerability Exposure (CVE) ID: CVE-2014-9841 http://www.openwall.com/lists/oss-security/2016/06/02/13 SuSE Security Announcement: SUSE-SU-2016:1784 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html SuSE Security Announcement: openSUSE-SU-2016:1748 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html SuSE Security Announcement: openSUSE-SU-2016:1833 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html http://www.ubuntu.com/usn/USN-3131-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8900 http://www.openwall.com/lists/oss-security/2015/02/26/13 http://www.openwall.com/lists/oss-security/2016/06/06/2 Common Vulnerability Exposure (CVE) ID: CVE-2015-8901 Common Vulnerability Exposure (CVE) ID: CVE-2015-8902 Common Vulnerability Exposure (CVE) ID: CVE-2015-8903 Common Vulnerability Exposure (CVE) ID: CVE-2017-7941 BugTraq ID: 97944 http://www.securityfocus.com/bid/97944 Debian Security Information: DSA-3863 (Google Search) http://www.debian.org/security/2017/dsa-3863 Common Vulnerability Exposure (CVE) ID: CVE-2017-7943 BugTraq ID: 97956 http://www.securityfocus.com/bid/97956 Common Vulnerability Exposure (CVE) ID: CVE-2017-8343 BugTraq ID: 98132 http://www.securityfocus.com/bid/98132 Common Vulnerability Exposure (CVE) ID: CVE-2017-8344 BugTraq ID: 98136 http://www.securityfocus.com/bid/98136 Common Vulnerability Exposure (CVE) ID: CVE-2017-8345 BugTraq ID: 98138 http://www.securityfocus.com/bid/98138 Common Vulnerability Exposure (CVE) ID: CVE-2017-8346 BugTraq ID: 98346 http://www.securityfocus.com/bid/98346 Common Vulnerability Exposure (CVE) ID: CVE-2017-8347 BugTraq ID: 98363 http://www.securityfocus.com/bid/98363 Common Vulnerability Exposure (CVE) ID: CVE-2017-8348 BugTraq ID: 98364 http://www.securityfocus.com/bid/98364 Common Vulnerability Exposure (CVE) ID: CVE-2017-8349 BugTraq ID: 98370 http://www.securityfocus.com/bid/98370 Common Vulnerability Exposure (CVE) ID: CVE-2017-8350 BugTraq ID: 98373 http://www.securityfocus.com/bid/98373 Common Vulnerability Exposure (CVE) ID: CVE-2017-8351 BugTraq ID: 98371 http://www.securityfocus.com/bid/98371 Common Vulnerability Exposure (CVE) ID: CVE-2017-8352 BugTraq ID: 98372 http://www.securityfocus.com/bid/98372 Common Vulnerability Exposure (CVE) ID: CVE-2017-8353 BugTraq ID: 98377 http://www.securityfocus.com/bid/98377 Common Vulnerability Exposure (CVE) ID: CVE-2017-8354 BugTraq ID: 98374 http://www.securityfocus.com/bid/98374 Common Vulnerability Exposure (CVE) ID: CVE-2017-8355 BugTraq ID: 98380 http://www.securityfocus.com/bid/98380 Common Vulnerability Exposure (CVE) ID: CVE-2017-8356 BugTraq ID: 98378 http://www.securityfocus.com/bid/98378 Common Vulnerability Exposure (CVE) ID: CVE-2017-8357 BugTraq ID: 98388 http://www.securityfocus.com/bid/98388 Common Vulnerability Exposure (CVE) ID: CVE-2017-8765 BugTraq ID: 98688 http://www.securityfocus.com/bid/98688 Common Vulnerability Exposure (CVE) ID: CVE-2017-8830 BugTraq ID: 98687 http://www.securityfocus.com/bid/98687 Common Vulnerability Exposure (CVE) ID: CVE-2017-9098 BugTraq ID: 98593 http://www.securityfocus.com/bid/98593 http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.c https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849b https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2017-9141 BugTraq ID: 98606 http://www.securityfocus.com/bid/98606 Common Vulnerability Exposure (CVE) ID: CVE-2017-9142 BugTraq ID: 98683 http://www.securityfocus.com/bid/98683 Common Vulnerability Exposure (CVE) ID: CVE-2017-9143 BugTraq ID: 98682 http://www.securityfocus.com/bid/98682 Common Vulnerability Exposure (CVE) ID: CVE-2017-9144 BugTraq ID: 98603 http://www.securityfocus.com/bid/98603
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.