Описание
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a patch.
A flaw was found in ImageMagick, a software used for editing and manipulating digital images. This vulnerability, a memory leak, occurs when the software processes certain image files. Specifically, during image writing operations, if an error occurs, allocated memory is not properly released. A remote attacker could exploit this by providing a specially crafted image, leading to resource exhaustion and a denial of service (DoS), making the system or application unavailable to legitimate users.
Отчет
The ImageMagick package in Red Hat Enterprise Linux 6 ELS and 7 ELS is affected by a MODERATE impact memory leak vulnerability. This flaw occurs when processing ASHLAR image files due to improper memory release during exception handling. Exploitation could lead to increased memory consumption.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ImageMagick | Out of support scope | ||
| Red Hat Enterprise Linux 7 | ImageMagick | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a patch.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a patch.
ImageMagick is free and open-source software used for editing and mani ...
Уязвимость функции WriteASHLARImage() файла coders/ashlar.c консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.3 Medium
CVSS3