CVE-2018-18544

Name
CVE-2018-18544
Description
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Exploit https://github.com/ImageMagick/ImageMagick/issues/1360
Third Party Advisory http://hg.code.sf.net/p/graphicsmagick/code/file/233618f8fe82/ChangeLog
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html
UBUNTU https://usn.ubuntu.com/4034-1/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:imagemagick:imagemagick:7.0.8-13:q16:*:*:*:*:*:* imagemagick == None == 7.0.8-13
cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:* graphicsmagick >= None < 1.3.31

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
imagemagick6 edge-community 6.9.10.37-r0 None fixed
graphicsmagick edge-community 1.3.32-r0 None fixed
graphicsmagick edge-community 1.3.30-r0 None possibly vulnerable
graphicsmagick edge-community 1.3.29-r0 None possibly vulnerable
graphicsmagick edge-community 1.3.28-r0 None possibly vulnerable
graphicsmagick edge-community 1.3.27-r0 None possibly vulnerable
graphicsmagick edge-community 1.3.26-r5 None possibly vulnerable
graphicsmagick edge-community 1.3.26-r3 None possibly vulnerable
graphicsmagick edge-community 1.3.26-r2 None possibly vulnerable
graphicsmagick edge-community 1.3.26-r0 None possibly vulnerable
graphicsmagick edge-community 1.3.25-r2 None possibly vulnerable
graphicsmagick edge-community 1.3.25-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.32-r0 None fixed
graphicsmagick 3.22-community 1.3.30-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.29-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.28-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.27-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.26-r5 None possibly vulnerable
graphicsmagick 3.22-community 1.3.26-r3 None possibly vulnerable
graphicsmagick 3.22-community 1.3.26-r2 None possibly vulnerable
graphicsmagick 3.22-community 1.3.26-r0 None possibly vulnerable
graphicsmagick 3.22-community 1.3.25-r2 None possibly vulnerable
graphicsmagick 3.22-community 1.3.25-r0 None possibly vulnerable
graphicsmagick 3.21-community 1.3.32-r0 None fixed
graphicsmagick 3.20-community 1.3.32-r0 None fixed
graphicsmagick 3.19-community 1.3.32-r0 None fixed
graphicsmagick 3.18-community 1.3.32-r0 None fixed
graphicsmagick 3.17-community 1.3.32-r0 None fixed