{"id":"CVE-2017-1000476","aliases":["DEBIAN-CVE-2017-1000476","DLA-1229-1","DLA-1785-1","DLA-2366-1","EUVD-2017-1601","GHSA-p55v-c9mv-362m","RHSA-2020:1180","SUSE-SU-2018:0055-1","SUSE-SU-2018:0132-1","SUSE-SU-2018:1129-1","SUSE-SU-2018:1178-1","UBUNTU-CVE-2017-1000476","USN-3681-1"],"status":"published","title":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in...","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02847,"percentile":0.86814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2018-01-03T00:00:00Z","modified":"2026-09-01T20:03:40Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u20"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u10","8:6.7.7.10-5+deb7u11","8:6.7.7.10-5+deb7u12","8:6.7.7.10-5+deb7u13","8:6.7.7.10-5+deb7u14","8:6.7.7.10-5+deb7u15","8:6.7.7.10-5+deb7u16","8:6.7.7.10-5+deb7u17","8:6.7.7.10-5+deb7u18","8:6.7.7.10-5+deb7u19","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7","8:6.7.7.10-5+deb7u8","8:6.7.7.10-5+deb7u9"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u16"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u10","8:6.8.9.9-5+deb8u11","8:6.8.9.9-5+deb8u12","8:6.8.9.9-5+deb8u13","8:6.8.9.9-5+deb8u14","8:6.8.9.9-5+deb8u15","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3","8:6.8.9.9-5+deb8u4","8:6.8.9.9-5+deb8u5","8:6.8.9.9-5+deb8u6","8:6.8.9.9-5+deb8u7","8:6.8.9.9-5+deb8u8","8:6.8.9.9-5+deb8u9"],"bundled":50},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u10"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":50},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.23.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.2"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9"],"bundled":124},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9"],"bundled":124},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.2"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6"],"bundled":124}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://usn.ubuntu.com/3681-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/102428","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/867","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000476","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p55v-c9mv-362m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-1000476","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1180","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801681","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000476","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14436","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7398","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13311","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180055-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042948","tags":["report"]},{"url":"https://bugzilla.suse.com/1049373","tags":["report"]},{"url":"https://bugzilla.suse.com/1051412","tags":["report"]},{"url":"https://bugzilla.suse.com/1052252","tags":["report"]},{"url":"https://bugzilla.suse.com/1052771","tags":["report"]},{"url":"https://bugzilla.suse.com/1058082","tags":["report"]},{"url":"https://bugzilla.suse.com/1072902","tags":["report"]},{"url":"https://bugzilla.suse.com/1074122","tags":["report"]},{"url":"https://bugzilla.suse.com/1074425","tags":["report"]},{"url":"https://bugzilla.suse.com/1074610","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9409","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180132-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047044","tags":["report"]},{"url":"https://bugzilla.suse.com/1047898","tags":["report"]},{"url":"https://bugzilla.suse.com/1050120","tags":["report"]},{"url":"https://bugzilla.suse.com/1050606","tags":["report"]},{"url":"https://bugzilla.suse.com/1051446","tags":["report"]},{"url":"https://bugzilla.suse.com/1052468","tags":["report"]},{"url":"https://bugzilla.suse.com/1052550","tags":["report"]},{"url":"https://bugzilla.suse.com/1052710","tags":["report"]},{"url":"https://bugzilla.suse.com/1052720","tags":["report"]},{"url":"https://bugzilla.suse.com/1052731","tags":["report"]},{"url":"https://bugzilla.suse.com/1052732","tags":["report"]},{"url":"https://bugzilla.suse.com/1055065","tags":["report"]},{"url":"https://bugzilla.suse.com/1055323","tags":["report"]},{"url":"https://bugzilla.suse.com/1055434","tags":["report"]},{"url":"https://bugzilla.suse.com/1055855","tags":["report"]},{"url":"https://bugzilla.suse.com/1058640","tags":["report"]},{"url":"https://bugzilla.suse.com/1059751","tags":["report"]},{"url":"https://bugzilla.suse.com/1074123","tags":["report"]},{"url":"https://bugzilla.suse.com/1074969","tags":["report"]},{"url":"https://bugzilla.suse.com/1074973","tags":["report"]},{"url":"https://bugzilla.suse.com/1074975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5247","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047356","tags":["report"]},{"url":"https://bugzilla.suse.com/1086773","tags":["report"]},{"url":"https://bugzilla.suse.com/1086782","tags":["report"]},{"url":"https://bugzilla.suse.com/1087027","tags":["report"]},{"url":"https://bugzilla.suse.com/1087033","tags":["report"]},{"url":"https://bugzilla.suse.com/1087037","tags":["report"]},{"url":"https://bugzilla.suse.com/1089781","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9018","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181178-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1058635","tags":["report"]},{"url":"https://bugzilla.suse.com/1074117","tags":["report"]},{"url":"https://bugzilla.suse.com/1087039","tags":["report"]},{"url":"https://bugzilla.suse.com/1087825","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9135","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-1000476","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3681-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-10995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-7443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-9133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11656","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-1000476","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T18:00:00Z","modified":"2024-08-05T22:00:41.596Z","updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2017-1601","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T18:00:00Z","modified":"2024-08-05T22:00:41Z","updated_at":"2026-11-03T02:23:03.159581Z"}],"ghsa":[{"id":"GHSA-p55v-c9mv-362m","title":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in...","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2022-05-13T01:17:27Z","modified":"2023-02-01T05:05:02Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:50:13.161108Z"}],"nvd":[{"id":"CVE-2017-1000476","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T18:29:00.197Z","modified":"2026-06-17T00:59:14.203Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:12.690425Z"}],"osv":[{"id":"CVE-2017-1000476","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T18:29:00.197Z","modified":"2026-03-15T14:22:36.741425Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-1000476","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T18:29:00.197Z","modified":"2026-09-01T20:03:40.988435414Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"RHSA-2020:1180","title":"Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:13:45Z","modified":"2026-06-27T10:09:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2017-1000476","description":"ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.","status":"published","published":"2018-01-03T00:00:00Z","modified":"2026-04-22T11:09:33.037327Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1229-1","title":"imagemagick - security update","status":"published","published":"2018-01-04T00:00:00Z","modified":"2026-03-09T01:01:32.136504Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1785-1","title":"imagemagick - security update","status":"published","published":"2019-05-13T00:00:00Z","modified":"2026-03-09T01:22:33.252689Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2366-1","title":"imagemagick - security update","status":"published","published":"2020-09-07T00:00:00Z","modified":"2026-03-09T01:21:05.169049Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"SUSE-SU-2018:0055-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-1000476: A CPU exhaustion vulnerability was found in the function\n ReadDDSInfo in coders/dds.c, which allowed attackers to cause a denial of\n service (bsc#1074610).\n- CVE-2017-9409: The ReadMPCImage function in mpc.c allowed attackers to cause\n a denial of service (memory leak) via a crafted file (bsc#1042948).\n- CVE-2017-1000445: A NULL pointer dereference in the MagickCore component\n might have lead to denial of service (bsc#1074425).\n- CVE-2017-17680: Prevent a memory leak in the function ReadXPMImage in\n coders/xpm.c, which allowed attackers to cause a denial of service via a\n crafted XPM image file (a different vulnerability than CVE-2017-17882)\n (bsc#1072902).\n- CVE-2017-17882: Prevent a memory leak in the function ReadXPMImage in\n coders/xpm.c, which allowed attackers to cause a denial of service via a\n crafted XPM image file (a different vulnerability than CVE-2017-17680)\n (bsc#1074122).\n- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not\n validate blob sizes, which allowed remote attackers to cause a denial of\n service (application crash) or possibly have unspecified other impact via an\n image received from stdin (bsc#1049373).\n- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in\n coders/mpc.c allowed attackers to cause DoS (bsc#1052252).\n- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in\n coders\\mpc.c via crafted file allowing for DoS (bsc#1052771).\n- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that\n lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c\n allowed remote attackers to cause a denial of service via a crafted file\n (bsc#1058082).\n- Prevent memory leak via crafted file in pwp.c allowing for DoS (bsc#1051412)\n","status":"published","published":"2018-01-09T15:35:03Z","modified":"2026-02-04T03:18:09.962155Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0132-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-12672: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n service (bsc#1052720).\n- CVE-2017-13060: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n service via a crafted file (bsc#1055065).\n- CVE-2017-11724: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c involving the quantum_info and clone_info data\n structures (bsc#1051446).\n- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion\n failure in the function DestroyImage in MagickCore/image.c, which allowed\n attackers to cause a denial of service (bsc#1052731).\n- CVE-2017-12667: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c (bsc#1052732).\n- CVE-2017-13146: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c (bsc#1055323).\n- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a\n denial of service (OOM) in ReadMATImage() if the size specified for a MAT\n Object was larger than the actual amount of data (bsc#1047044)\n- CVE-2017-13648: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c (bsc#1055434).\n- CVE-2017-11141: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders\\mat.c that could have caused memory exhaustion via a\n crafted MAT file, related to incorrect ordering of a SetImageExtent call\n (bsc#1047898).\n- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote\n attackers to cause a denial of service (memory leak) via a crafted file\n (bsc#1050120).\n- CVE-2017-12564: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n service (bsc#1052468).\n- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in\n coders/mat.c, which allowed attackers to cause a denial of service (assertion\n failure) in DestroyImageInfo in image.c (bsc#1052550).\n- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,\n that could have lead to a memory leak in the function ReadImage in\n MagickCore/constitute.c, which allowed attackers to cause a denial of service\n (bsc#1052710).\n- CVE-2017-14326: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n service via a crafted file (bsc#1058640).\n- CVE-2017-11644: Processesing a crafted file in convert could have lead to a\n memory leak in the ReadMATImage() function in coders/mat.c (bsc#1050606).\n- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in\n coders/mat.c, which could have lead to a denial of service (assertion failure\n and application exit) in the DestroyImageInfo function in MagickCore/image.c\n (bsc#1055855).\n- CVE-2017-14533: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c (bsc#1059751).\n- CVE-2017-17881: Fixed a memory leak vulnerability in the function\n ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n service via a crafted MAT image file (bsc#1074123).\n- CVE-2017-1000476: Prevent CPU exhaustion in the function ReadDDSInfo in\n coders/dds.c, which allowed attackers to cause a denial of service\n (bsc#1074610).\n- CVE-2017-9409: Fixed a memory leak vulnerability in the function ReadMPCImage\n in mpc.c, which allowed attackers to cause a denial of service via a crafted\n file (bsc#1042948).\n- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not\n validate blob sizes, which allowed remote attackers to cause a denial of service\n (application crash) or possibly have unspecified other impact via an image\n received from stdin (bsc#1049373)\n- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in\n coders/mpc.c allowed attackers to cause DoS (bsc#1052252)\n- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in\n coders\\mpc.c via crafted file allowing for DoS (bsc#1052771)\n- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that\n lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c\n allowed remote attackers to cause a denial of service via a crafted file\n (bsc#1058082)\n- CVE-2017-1000445: Added a NUL pointer check in the MagickCore component that\n might have lead to denial of service (bsc#1074425).\n- CVE-2017-11751: Fixed a memory leak vulnerability in the function\n WritePICONImage in coders/xpm.c that allowed remote attackers to cause a denial\n of service via a crafted file (bsc#1051412).\n- CVE-2017-17680: Fixed a memory leak vulnerability in the function\n ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n service via a crafted xpm image file (bsc#1072902).\n- CVE-2017-17882: Fixed a memory leak vulnerability in the function\n ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n service via a crafted XPM image file (bsc#1074122).\n- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in\n coders/pattern.c (bsc#1074973).\n- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in\n MagickWand/montage.c (bsc#1074975)\n- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in\n coders/rla.c (bsc#1074969)\n","status":"published","published":"2018-01-18T10:37:33Z","modified":"2025-05-02T04:06:01.279269Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1129-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n\n- security update (png.c)\n * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n Attackers could leverage this vulnerability to cause a crash and denial of service \n via a crafted mng file. [bsc#1086773]\n * CVE-2018-10177: there is an infinite loop in the ReadOneMNGImagefunction of the coders/png.c file. Remote attackers could leverage thisvulnerability to cause a denial of service (bsc#1089781)\n\n- security update (wand)\n * CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow \n attackers to cause a denial of service via a crafted file. [bsc#1087033]\n\n- security update (gif.c)\n * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n which could lead to denial of service via a crafted file. [bsc#1087027]\n\n- security update (core)\n * CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c \n could allow attackers to obtain sensitive information from process memory or possibly have \n unspecified other impact via a crafted SVG document that is mishandled in the \n GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356]\n\n- security update (pcd.c)\n * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n which could lead to a denial of service via a crafted file. [bsc#1087037]\n\n- security update (gif.c)\n * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027]\n\n- security update (tiff.c)\n * CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in ImageMagick memory allocation issue could lead to denial of service (bsc#1086782)\n\n\n\n","status":"published","published":"2018-05-02T13:50:19Z","modified":"2026-02-04T03:43:49.336245Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1178-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in\n the function PersistPixelCache in magick/cache.c, which allowed attackers\n to cause a denial of service (memory consumption in ReadMPCImage in\n coders/mpc.c) via a crafted file. [bsc#1058635]\n- CVE-2017-17887: In ImageMagick, a memory leak vulnerability was found\n in the function GetImagePixelCache in magick/cache.c, which allowed\n attackers to cause a denial of service via a crafted MNG image file that\n is processed by ReadOneMNGImage. [bsc#1074117]\n- CVE-2017-18250: A NULL pointer dereference vulnerability was found in the function \n LogOpenCLBuildFailure in MagickCore/opencl.c, which could lead to a denial of service \n via a crafted file. [bsc#1087039]\n- CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n which could lead to a denial of service via a crafted file. [bsc#1087037]\n- CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow \n attackers to cause a denial of service via a crafted file. [bsc#1087033]\n- CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n which could lead to denial of service via a crafted file. [bsc#1087027]\n- CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in\n ImageMagick did not properly restrict memory allocation, leading to a\n heap-based buffer over-read. [bsc#1086782]\n- CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n Attackers could leverage this vulnerability to cause a crash and denial of service \n via a crafted mng file. [bsc#1086773]\n- CVE-2018-9135: heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c \n could lead to denial of service. [bsc#1087825]\n- CVE-2018-10177: In ImageMagick, there was an infinite loop in the\n ReadOneMNGImage function of the coders/png.c file. Remote attackers\n could leverage this vulnerability to cause a denial of service via a\n crafted mng file. [bsc#1089781]\n- CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c \n could allow attackers to obtain sensitive information from process memory or possibly have \n unspecified other impact via a crafted SVG document that is mishandled in the \n GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356]\n\n","status":"published","published":"2018-05-09T11:30:27Z","modified":"2026-02-04T04:31:36.451313Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3681-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2018-06-12T11:40:14Z","modified":"2026-04-22T09:46:51.738947Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}