6.5
CVSSv3

CVE-2018-10805

Published: 08/05/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 7.0.7-28

canonical ubuntu linux 14.04

canonical ubuntu linux 16.04

canonical ubuntu linux 17.10

canonical ubuntu linux 18.04

Vendor Advisories

Synopsis Moderate: ImageMagick security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Mod ...
Several security issues were fixed in ImageMagick ...
Debian Bug report logs - #894848 imagemagick: CVE-2018-9133: Excessive iteration in DecodeLabImage and EncodeLabImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 4 ...
Debian Bug report logs - #898217 imagemagick: CVE-2018-10804 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 8 May 2018 20:21:02 UTC Severity: normal Tags: fixed-upst ...
Debian Bug report logs - #898218 imagemagick: CVE-2018-10805 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 8 May 2018 20:27:02 UTC Severity: normal Tags: fixed-upst ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
An issue was discovered in ImageMagick 707 A memory leak vulnerability was found in the function WriteGIFImage in coders/gifc, which allow remote attackers to cause a denial of service via a crafted file (CVE-2017-18254) An issue was discovered in ImageMagick 707 The MogrifyImageList function in MagickWand/mogrifyc allows attackers to caus ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
Integer overflow in MagickCore/profilec in ImageMagick before 702-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable (CVE-2016-5841) ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, ...