Exploit the possiblities

Debian Security Advisory 4032-1

Debian Security Advisory 4032-1
Posted Nov 14, 2017
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4032-1 - Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF, PCX, JPG or SFW files are processed.

tags | advisory, denial of service, arbitrary
systems | linux, debian
advisories | CVE-2017-12983, CVE-2017-13134, CVE-2017-13758, CVE-2017-13769, CVE-2017-14224, CVE-2017-14607, CVE-2017-14682, CVE-2017-14989, CVE-2017-15277
MD5 | ed2abc741b4d032c65907e0275aa7e20

Debian Security Advisory 4032-1

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4032-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
November 12, 2017 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : imagemagick
CVE ID : CVE-2017-12983 CVE-2017-13134 CVE-2017-13758
CVE-2017-13769 CVE-2017-14224 CVE-2017-14607
CVE-2017-14682 CVE-2017-14989 CVE-2017-15277
Debian Bug : 873134 873099 878508 878507 876097 878527 876488 878562
878578

This update fixes several vulnerabilities in imagemagick: Various memory
handling problems and cases of missing or incomplete input sanitising
may result in denial of service, memory disclosure or the execution of
arbitrary code if malformed GIF, TTF, SVG, TIFF, PCX, JPG or SFW files
are processed.

For the stable distribution (stretch), these problems have been fixed in
version 8:6.9.7.4+dfsg-11+deb9u3.

We recommend that you upgrade your imagemagick packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=mtx5
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

November 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    22 Files
  • 2
    Nov 2nd
    28 Files
  • 3
    Nov 3rd
    10 Files
  • 4
    Nov 4th
    1 Files
  • 5
    Nov 5th
    5 Files
  • 6
    Nov 6th
    15 Files
  • 7
    Nov 7th
    15 Files
  • 8
    Nov 8th
    13 Files
  • 9
    Nov 9th
    9 Files
  • 10
    Nov 10th
    9 Files
  • 11
    Nov 11th
    3 Files
  • 12
    Nov 12th
    2 Files
  • 13
    Nov 13th
    15 Files
  • 14
    Nov 14th
    17 Files
  • 15
    Nov 15th
    19 Files
  • 16
    Nov 16th
    15 Files
  • 17
    Nov 17th
    19 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close