{"schemaVersion":3,"id":"SUSE-SU-2018:0055-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for ImageMagick\n\nThis update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-1000476: A CPU exhaustion vulnerability was found in the function\n  ReadDDSInfo in coders/dds.c, which allowed attackers to cause a denial of\n  service (bsc#1074610).\n- CVE-2017-9409: The ReadMPCImage function in mpc.c allowed attackers to cause\n  a denial of service (memory leak) via a crafted file (bsc#1042948).\n- CVE-2017-1000445: A NULL pointer dereference in the MagickCore component\n  might have lead to denial of service (bsc#1074425).\n- CVE-2017-17680: Prevent a memory leak in the function ReadXPMImage in\n  coders/xpm.c, which allowed attackers to cause a denial of service via a\n  crafted XPM image file (a different vulnerability than CVE-2017-17882)\n  (bsc#1072902).\n- CVE-2017-17882: Prevent a memory leak in the function ReadXPMImage in\n  coders/xpm.c, which allowed attackers to cause a denial of service via a\n  crafted XPM image file (a different vulnerability than CVE-2017-17680)\n  (bsc#1074122).\n- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not\n  validate blob sizes, which allowed remote attackers to cause a denial of\n  service (application crash) or possibly have unspecified other impact via an\n  image received from stdin (bsc#1049373).\n- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in\n  coders/mpc.c allowed attackers to cause DoS (bsc#1052252).\n- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in\n  coders\\mpc.c via crafted file allowing for DoS (bsc#1052771).\n- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that\n  lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c\n  allowed remote attackers to cause a denial of service via a crafted file\n  (bsc#1058082).\n- Prevent memory leak via crafted file in pwp.c allowing for DoS (bsc#1051412)","dates":{"published":"2018-01-09T15:35:03.000Z","modified":"2026-02-04T03:18:09.962Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server 12 SP3","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP2","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","purlType":"rpm","versions":[{"text":"< 6.8.8.1-71.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.8.8.1-71.23.1","eol":null,"hubHref":null}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180055-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20180055-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1042948","label":"bugzilla.suse.com/1042948","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1049373","label":"bugzilla.suse.com/1049373","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1051412","label":"bugzilla.suse.com/1051412","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1052252","label":"bugzilla.suse.com/1052252","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1052771","label":"bugzilla.suse.com/1052771","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1058082","label":"bugzilla.suse.com/1058082","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1072902","label":"bugzilla.suse.com/1072902","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1074122","label":"bugzilla.suse.com/1074122","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1074425","label":"bugzilla.suse.com/1074425","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1074610","label":"bugzilla.suse.com/1074610","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000445","label":"www.suse.com/security/cve/CVE-2017-1000445","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000476","label":"www.suse.com/security/cve/CVE-2017-1000476","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11449","label":"www.suse.com/security/cve/CVE-2017-11449","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11751","label":"www.suse.com/security/cve/CVE-2017-11751","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12430","label":"www.suse.com/security/cve/CVE-2017-12430","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12642","label":"www.suse.com/security/cve/CVE-2017-12642","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14249","label":"www.suse.com/security/cve/CVE-2017-14249","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17680","label":"www.suse.com/security/cve/CVE-2017-17680","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17882","label":"www.suse.com/security/cve/CVE-2017-17882","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9409","label":"www.suse.com/security/cve/CVE-2017-9409","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-11449","CVE-2017-11751","CVE-2017-12430","CVE-2017-12642","CVE-2017-14249","CVE-2017-17680","CVE-2017-17882","CVE-2017-9409"],"downstream":[],"duplicates":[],"related":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-11449","CVE-2017-11751","CVE-2017-12430","CVE-2017-12642","CVE-2017-14249","CVE-2017-17680","CVE-2017-17882","CVE-2017-9409"]},"timeline":[{"kind":"published","date":"2018-01-09T15:35:03.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:18:09.962Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T18:40:12.266Z","stale":false,"partial":false}}