CVE-2019-17540

Name
CVE-2019-17540
Description
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Issue Tracking https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15826
Issue Tracking https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942578
Patch https://security-tracker.debian.org/tracker/CVE-2019-17540
Patch https://github.com/ImageMagick/ImageMagick/compare/7.0.8-53...7.0.8-54
Third Party Advisory https://github.com/ImageMagick/ImageMagick/compare/master@%7B2019-07-15%7D...master@%7B2019-07-17%7D

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* imagemagick >= 6.9.10-54 < 6.9.10-55
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* imagemagick >= 7.0.0-0 < 7.0.8-54

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
imagemagick edge-community 7.0.8.62-r0 None fixed
imagemagick edge-community 7.0.8.56-r0 None fixed
imagemagick edge-community 7.0.8.53-r0 None possibly vulnerable
imagemagick edge-community 7.0.8.44-r0 None possibly vulnerable
imagemagick edge-community 7.0.8.38-r0 None possibly vulnerable
imagemagick 3.22-community 7.0.8.62-r0 None fixed
imagemagick 3.22-community 7.0.8.56-r0 None fixed
imagemagick 3.22-community 7.0.8.53-r0 None possibly vulnerable
imagemagick 3.22-community 7.0.8.44-r0 None possibly vulnerable
imagemagick 3.22-community 7.0.8.38-r0 None possibly vulnerable
imagemagick 3.21-community 7.0.8.56-r0 None fixed
imagemagick 3.20-community 7.0.8.56-r0 None fixed
imagemagick 3.19-community 7.0.8.56-r0 None fixed
imagemagick 3.18-community 7.0.8.56-r0 None fixed
imagemagick 3.17-community 7.0.8.56-r0 None fixed