CVE-2017-18211
ImageMagick: NULL pointer dereference in saveBinaryCLProgram in magick/opencl.c
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (düşük), Ubuntu (düşük).
Açıklama
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 12 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 13 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 14 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 9 | imagemagick | 8:6.9.7.4+dfsg-11+deb9u10 |
| echo | imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 11 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 12 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 13 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| ubuntu 16.04 | imagemagick | 8:6.8.9.9-7ubuntu5.11 |
| ubuntu 16.04-ESM | imagemagick | 8:6.8.9.9-7ubuntu5.11 |
| ubuntu 17.10 | imagemagick | 8:6.9.7.4+dfsg-16ubuntu2.2 |
14 kaynaktaki 14 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 12 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 13 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 14 | imagemagick | 8:6.9.9.34+dfsg-3 |
| debian 9 | imagemagick | 8:6.9.7.4+dfsg-11+deb9u10 |
| echo | imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 11 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 12 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| root.io debian 13 | rootio-imagemagick | 8:6.9.9.34+dfsg-3 |
| ubuntu 16.04 | imagemagick | 8:6.8.9.9-7ubuntu5.11 |
| ubuntu 16.04-ESM | imagemagick | 8:6.8.9.9-7ubuntu5.11 |
| ubuntu 17.10 | imagemagick | 8:6.9.7.4+dfsg-16ubuntu2.2 |
| ubuntu 18.04 | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.2 |
| ubuntu 18.04-ESM | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.2 |
Referanslar
- http://www.securityfocus.com/bid/103220
- https://access.redhat.com/security/cve/CVE-2017-18211
- https://github.com/ImageMagick/ImageMagick/issues/792
- https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-18211
- https://ubuntu.com/security/notices/USN-3681-1
- https://usn.ubuntu.com/3681-1/
- https://www.cve.org/CVERecord?id=CVE-2017-18211