CVE-2014-9843
ImageMagick: incorrect boundary checks in DecodePSDPixels
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (orta), Ubuntu (orta).
Açıklama
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.8.9.9-4 |
| debian 12 | imagemagick | 8:6.8.9.9-4 |
| debian 13 | imagemagick | 8:6.8.9.9-4 |
| debian 14 | imagemagick | 8:6.8.9.9-4 |
| debian 7 | imagemagick | 8:6.7.7.10-5+deb7u8 |
| echo | imagemagick | 8:6.8.9.9-4 |
| Red Hat | ImageMagick, ImageMagick-c++, ImageMagick-c++-devel ve 3 tane daha | düzeltme belirtilmemiş |
| root.io debian 11 | rootio-imagemagick | 8:6.8.9.9-4 |
| root.io debian 12 | rootio-imagemagick | 8:6.8.9.9-4 |
| root.io debian 13 | rootio-imagemagick | 8:6.8.9.9-4 |
| seal Red Hat 7 | imagemagick, seal-imagemagick | 6.9.10.68-6.el7_9+sp999 |
| ubuntu 12.04 | imagemagick | 8:6.6.9.7-5ubuntu3.5 |
14 kaynaktaki 20 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.8.9.9-4 |
| debian 12 | imagemagick | 8:6.8.9.9-4 |
| debian 13 | imagemagick | 8:6.8.9.9-4 |
| debian 14 | imagemagick | 8:6.8.9.9-4 |
| debian 7 | imagemagick | 8:6.7.7.10-5+deb7u8 |
| echo | imagemagick | 8:6.8.9.9-4 |
| Red Hat | ImageMagick | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-c++ | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-c++-devel | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-devel | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-doc | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-perl | düzeltme belirtilmemiş |
| root.io debian 11 | rootio-imagemagick | 8:6.8.9.9-4 |
| root.io debian 12 | rootio-imagemagick | 8:6.8.9.9-4 |
| root.io debian 13 | rootio-imagemagick | 8:6.8.9.9-4 |
| seal Red Hat 7 | imagemagick | 6.9.10.68-6.el7_9+sp999 |
| seal Red Hat 7 | seal-imagemagick | 6.9.10.68-6.el7_9+sp999 |
| ubuntu 12.04 | imagemagick | 8:6.6.9.7-5ubuntu3.5 |
| ubuntu 14.04 | imagemagick | 8:6.7.7.10-6ubuntu3.2 |
| ubuntu 14.04-ESM | imagemagick | 8:6.7.7.10-6ubuntu3.2 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- http://www.ubuntu.com/usn/USN-3131-1
- https://access.redhat.com/security/cve/CVE-2014-9843
- https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=b8df15144d91a19ed545893ea492363635a1cb29
- https://bugzilla.redhat.com/show_bug.cgi?id=1343501