CVE-2017-5511
ImageMagick: Memory corruption heap overflow in psd.c
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (orta), Ubuntu (orta).
Açıklama
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 12 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 13 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 14 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 7 | imagemagick | 8:6.7.7.10-5+deb7u11 |
| debian 8 | imagemagick | 8:6.8.9.9-5+deb8u7 |
| echo | imagemagick | 8:6.9.7.4+dfsg-1 |
| Red Hat | ImageMagick, ImageMagick-c++, ImageMagick-c++-devel ve 3 tane daha | düzeltme belirtilmemiş |
| root.io debian 11 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| root.io debian 12 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| root.io debian 13 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| seal Red Hat 7 | imagemagick, seal-imagemagick | 6.9.10.68-6.el7_9+sp999 |
18 kaynaktaki 24 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 12 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 13 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 14 | imagemagick | 8:6.9.7.4+dfsg-1 |
| debian 7 | imagemagick | 8:6.7.7.10-5+deb7u11 |
| debian 8 | imagemagick | 8:6.8.9.9-5+deb8u7 |
| echo | imagemagick | 8:6.9.7.4+dfsg-1 |
| Red Hat | ImageMagick | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-c++ | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-c++-devel | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-devel | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-doc | düzeltme belirtilmemiş |
| Red Hat | ImageMagick-perl | düzeltme belirtilmemiş |
| root.io debian 11 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| root.io debian 12 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| root.io debian 13 | rootio-imagemagick | 8:6.9.7.4+dfsg-1 |
| seal Red Hat 7 | imagemagick | 6.9.10.68-6.el7_9+sp999 |
| seal Red Hat 7 | seal-imagemagick | 6.9.10.68-6.el7_9+sp999 |
| ubuntu 12.04 | imagemagick | 8:6.6.9.7-5ubuntu3.8 |
| ubuntu 14.04 | imagemagick | 8:6.7.7.10-6ubuntu3.5 |
| ubuntu 14.04-ESM | imagemagick | 8:6.7.7.10-6ubuntu3.5 |
| ubuntu 16.04 | imagemagick | 8:6.8.9.9-7ubuntu5.5 |
| ubuntu 16.04-ESM | imagemagick | 8:6.8.9.9-7ubuntu5.5 |
| ubuntu 16.10 | imagemagick | 8:6.8.9.9-7ubuntu8.4 |
Referanslar
- http://www.debian.org/security/2017/dsa-3799
- http://www.openwall.com/lists/oss-security/2017/01/16/6
- http://www.openwall.com/lists/oss-security/2017/01/17/5
- http://www.securityfocus.com/bid/95746
- https://access.redhat.com/security/cve/CVE-2017-5511
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374
- https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790
- https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42