CVE-2018-18544

Опубликовано: 21 окт. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

Ссылки

http://hg.code.sf.net/p/graphicsmagick/code/file/233618f8fe82/ChangeLog
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1360
Exploit
Issue Tracking
Patch
Third Party Advisory
https://usn.ubuntu.com/4034-1/
http://hg.code.sf.net/p/graphicsmagick/code/file/233618f8fe82/ChangeLog
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1360
Exploit
Issue Tracking
Patch
Third Party Advisory
https://usn.ubuntu.com/4034-1/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*

Версия до 1.3.31 (исключая)

cpe:2.3:a:imagemagick:imagemagick:7.0.8-13:q16:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00145

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2018-18544

CVSS3: 6.5

ubuntu

больше 6 лет назад

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

CVE-2018-18544

CVSS3: 3.3

redhat

почти 7 лет назад

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

CVE-2018-18544

CVSS3: 6.5

debian

больше 6 лет назад

There is a memory leak in the function WriteMSLImage of coders/msl.c i ...

openSUSE-SU-2018:4054-1

suse-cvrf

больше 6 лет назад

Security update for ImageMagick

openSUSE-SU-2018:3827-1

suse-cvrf

больше 6 лет назад

Security update for GraphicsMagick

EPSS

Процентиль: 36%

0.00145

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-772