SUSE-SU-2017:2199-1: ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:2199-1 is a vulnerability in ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 17-08-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826) - CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c (bsc#1042812) - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289) - CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via acrafted file (bsc#1049072)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse11 products
- ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2< 6.8.8.1-71.5.3
- ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP3< 6.8.8.1-71.5.3
- ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2< 6.8.8.1-71.5.3
- ImageMagick&distro=SUSE Linux Enterprise Server 12 SP3< 6.8.8.1-71.5.3
- ImageMagick&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 6.8.8.1-71.5.3
1 vendor · 11 products