{"id":"CVE-2018-16644","aliases":["DEBIAN-CVE-2018-16644","DLA-1530-1","DSA-4316-1","EUVD-2018-8447","GHSA-w58x-7j5p-4cgg","MGASA-2018-0496","RHSA-2020:1180","SUSE-SU-2018:2977-1","SUSE-SU-2018:3095-1","SUSE-SU-2018:3269-1","SUSE-SU-2018:3348-1","SUSE-SU-2018:3465-1","SUSE-SU-2018:3808-1","SUSE-SU-2019:1033-1","SUSE-SU-2019:1033-2","UBUNTU-CVE-2018-16644","USN-3785-1","USN-4034-1"],"status":"published","title":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and...","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03645,"percentile":0.89662,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-09-06T00:00:00Z","modified":"2026-10-24T14:12:15Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u14"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u10","8:6.8.9.9-5+deb8u11","8:6.8.9.9-5+deb8u12","8:6.8.9.9-5+deb8u13","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3","8:6.8.9.9-5+deb8u4","8:6.8.9.9-5+deb8u5","8:6.8.9.9-5+deb8u6","8:6.8.9.9-5+deb8u7","8:6.8.9.9-5+deb8u8","8:6.8.9.9-5+deb8u9"],"bundled":7},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u6"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5"],"bundled":5},{"source":"osv","ecosystem":"Mageia:6","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.31-1.mga6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.24.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.79.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.79.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.79.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.79.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.79.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.72.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.72.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.85.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.79.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.79.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.79.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.108.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.13"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.4"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.13"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.4"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.14"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4"],"bundled":28}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/commit/16916c8979c32765c542e216b31cee2671b7afe7","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/afa878a689870c28b6994ecf3bb8dbfb2b76d135","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2018/dsa-4316","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3785-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/1269","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4034-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16644","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w58x-7j5p-4cgg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16644","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0496.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23157","tags":["report"]},{"url":"http://www.graphicsmagick.org/NEWS.html#november-17-2018","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1180","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801681","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14436","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16644","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7398","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13311","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182977-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106855","tags":["report"]},{"url":"https://bugzilla.suse.com/1106857","tags":["report"]},{"url":"https://bugzilla.suse.com/1106858","tags":["report"]},{"url":"https://bugzilla.suse.com/1106989","tags":["report"]},{"url":"https://bugzilla.suse.com/1107604","tags":["report"]},{"url":"https://bugzilla.suse.com/1107609","tags":["report"]},{"url":"https://bugzilla.suse.com/1107612","tags":["report"]},{"url":"https://bugzilla.suse.com/1107616","tags":["report"]},{"url":"https://bugzilla.suse.com/1107618","tags":["report"]},{"url":"https://bugzilla.suse.com/1107619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16645","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183095-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050129","tags":["report"]},{"url":"https://bugzilla.suse.com/1105592","tags":["report"]},{"url":"https://bugzilla.suse.com/1108282","tags":["report"]},{"url":"https://bugzilla.suse.com/1108283","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16750","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183269-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1110746","tags":["report"]},{"url":"https://bugzilla.suse.com/1110747","tags":["report"]},{"url":"https://bugzilla.suse.com/1111069","tags":["report"]},{"url":"https://bugzilla.suse.com/1111072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18024","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183348-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1074170","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17934","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183465-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1112399","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14997","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183808-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050635","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11639","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191033-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106996","tags":["report"]},{"url":"https://bugzilla.suse.com/1120381","tags":["report"]},{"url":"https://bugzilla.suse.com/1122033","tags":["report"]},{"url":"https://bugzilla.suse.com/1124365","tags":["report"]},{"url":"https://bugzilla.suse.com/1124366","tags":["report"]},{"url":"https://bugzilla.suse.com/1124368","tags":["report"]},{"url":"https://bugzilla.suse.com/1128649","tags":["report"]},{"url":"https://bugzilla.suse.com/1130330","tags":["report"]},{"url":"https://bugzilla.suse.com/1131317","tags":["report"]},{"url":"https://bugzilla.suse.com/1132053","tags":["report"]},{"url":"https://bugzilla.suse.com/1132054","tags":["report"]},{"url":"https://bugzilla.suse.com/1132060","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9956","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191033-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16644","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3785-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4034-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16750","tags":["report"]},{"url":"https://launchpad.net/bugs/1793485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11598","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-16644","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T22:00:00Z","modified":"2024-08-05T10:32:53.054Z","updated_at":"2026-11-02T14:35:11.072321Z"}],"euvd":[{"id":"EUVD-2018-8447","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T22:00:00Z","modified":"2024-08-05T10:32:53Z","updated_at":"2026-11-03T02:39:40.768074Z"}],"ghsa":[{"id":"GHSA-w58x-7j5p-4cgg","title":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and...","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2022-05-13T01:19:16Z","modified":"2023-02-01T05:05:37Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:15.84507Z"}],"nvd":[{"id":"CVE-2018-16644","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T22:29:01.287Z","modified":"2026-06-17T01:44:36.46Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:38.672108Z"}],"osv":[{"id":"CVE-2018-16644","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T22:29:01.287Z","modified":"2026-10-24T14:12:15.482250965Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16644","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T22:29:01.287Z","modified":"2026-10-23T18:03:01.020762718Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2020:1180","title":"Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:13:45Z","modified":"2026-06-27T10:09:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-16644","description":"There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.","status":"published","published":"2018-09-06T00:00:00Z","modified":"2026-04-22T11:47:24.115543Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-1530-1","title":"imagemagick - security update","status":"published","published":"2018-10-03T00:00:00Z","modified":"2026-03-09T01:22:21.352441Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4316-1","title":"imagemagick - security update","status":"published","published":"2018-10-12T00:00:00Z","modified":"2026-03-09T02:09:05.267124Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0496","title":"Updated graphicsmagick packages fix security vulnerabilities \u0026 bugs","description":"Graphicsmagick has been updated to fix several bugs and security issues.\n","status":"published","published":"2018-12-31T22:42:09Z","modified":"2026-04-16T06:26:01.452347778Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2018:2977-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following security issues:\n\n- CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel\n function leading to DoS (bsc#1106989)\n- CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty\n function leading to DoS (bsc#1106858).\n- CVE-2018-16328: Prevent NULL pointer dereference exists in the\n CheckEventLogging function leading to DoS (bsc#1106857).\n- CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM\n file that has a negative pixel value. If the affected code was used as a\n library loaded into a process that includes sensitive information, that\n information sometimes can be leaked via the image data (bsc#1106855)\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n denial of service via a crafted image file due to an out-of-bounds write\n (bsc#1107616)\n- CVE-2018-16640: Prevent memory leak in the function ReadOneJNGImage\n (bsc#1107619)\n- CVE-2018-16641: Prevent memory leak in the TIFFWritePhotoshopLayers function\n (bsc#1107618).\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n ReadPICTImage did check the return value of the fputc function, which allowed\n remote attackers to cause a denial of service via a crafted image file\n (bsc#1107612)\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n and ReadPICTImage, which allowed remote attackers to cause a denial of service\n via a crafted image (bsc#1107609)\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n of service via a crafted image file (bsc#1107604)\n","status":"published","published":"2018-10-02T14:31:12Z","modified":"2026-02-04T04:40:14.42115Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3095-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following security issues:\n\n- CVE-2017-11532: Prevent a memory leak vulnerability in the WriteMPCImage()\n function in coders/mpc.c via a crafted file allowing for DoS (bsc#1050129)\n- CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function\n (bsc#1108283)\n- CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed an\n attacker to cause a denial of service (WriteBlob assertion failure and\n application exit) via a crafted file (bsc#1108282)\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n denial of service via a crafted image file due to an out-of-bounds write\n (bsc#1107616)\n- CVE-2018-16640: Prevent memory leak in the function ReadOneJNGImage\n (bsc#1107619)\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n ReadPICTImage did check the return value of the fputc function, which allowed\n remote attackers to cause a denial of service via a crafted image file\n (bsc#1107612)\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n and ReadPICTImage, which allowed remote attackers to cause a denial of service\n via a crafted image (bsc#1107609)\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n of service via a crafted image file (bsc#1107604)\n- CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel\n function leading to DoS (bsc#1106989)\n\nThis update also relaxes the restrictions of use of Postscript like formats to\n'write' only. (bsc#1105592)\n","status":"published","published":"2018-10-10T15:43:55Z","modified":"2026-02-04T03:13:31.559806Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3269-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following security issue:\n\n- CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function\n (bsc#1108283)\n- CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM\n file that has a negative pixel value. If the affected code was used as a\n library loaded into a process that includes sensitive information, that\n information sometimes can be leaked via the image data (bsc#1106855)\n- CVE-2018-16640: Prevent memory leak in the function ReadOneJNGImage\n (bsc#1107619).\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n denial of service via a crafted image file due to an out-of-bounds write\n (bsc#1107616).\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n ReadPICTImage did check the return value of the fputc function, which allowed\n remote attackers to cause a denial of service via a crafted image file\n (bsc#1107612).\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n and ReadPICTImage, which allowed remote attackers to cause a denial of service\n via a crafted image (bsc#1107609).\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n of service via a crafted image file (bsc#1107604).\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n the coders/bmp.c file. Remote attackers could leverage this vulnerability\n to cause a denial of service via a crafted bmp file. (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747).\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).\n- CVE-2018-16749: A missing NULL check in ReadOneJNGImage allowed remote\n attackers to cause a denial of service (WriteBlob assertion failure and\n application exit) via a crafted file. (bsc#1108282)\n","status":"published","published":"2018-10-22T08:16:11Z","modified":"2026-02-04T04:17:21.121306Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3348-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following security issue:\n\n- CVE-2017-17934: Prevent memory leaks, related to MSLPopImage and\n ProcessMSLScript, and associated with mishandling of MSLPushImage calls\n (bsc#1074170).\n- CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function\n (bsc#1108283)\n- CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed an\n attacker to cause a denial of service (WriteBlob assertion failure and\n application exit) via a crafted file (bsc#1108282)\n- CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel\n function leading to DoS (bsc#1106989).\n- CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM\n file that has a negative pixel value. If the affected code was used as a\n library loaded into a process that includes sensitive information, that\n information sometimes can be leaked via the image data (bsc#1106855)\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n denial of service via a crafted image file due to an out-of-bounds write\n (bsc#1107616)\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n ReadPICTImage did check the return value of the fputc function, which allowed\n remote attackers to cause a denial of service via a crafted image file\n (bsc#1107612)\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n and ReadPICTImage, which allowed remote attackers to cause a denial of service\n via a crafted image (bsc#1107609)\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n of service via a crafted image file (bsc#1107604)\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n the coders/bmp.c file. Remote attackers could leverage this vulnerability\n to cause a denial of service via a crafted bmp file (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072)\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747)\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746)\n","status":"published","published":"2018-10-23T14:01:23Z","modified":"2026-02-04T02:17:57.771269Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3465-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2017-14997: GraphicsMagick allowed remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. [bsc#1112399]\n- CVE-2018-16644: An regression in the security fix for the pict coder was fixed (bsc#1107609)\n\n","status":"published","published":"2018-10-25T15:11:09Z","modified":"2026-02-04T03:50:45.644318Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3808-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n\n- CVE-2017-14997: ImageMagick allowed remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. (bsc#1112399)\n- CVE-2018-16644: A regression in the security fix for the pict coder was fixed (bsc#1107609)\n- CVE-2017-11532: When ImageMagick processed a crafted file in convert, it could lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c. (bsc#1050129)\n- CVE-2017-11639: A regression in the security fix in the cip coder was fixed (bsc#1050635)\n\n","status":"published","published":"2018-11-19T10:29:35Z","modified":"2026-02-04T02:14:14.324301Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:1033-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel() (bsc#1130330).\n- CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage() (bsc#1131317).\n- CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649).\n- CVE-2018-20467: Fixed infinite loop in coders/bmp.c (bsc#1120381).\n- CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365).\n- CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366).\n- CVE-2019-7395: Fixed a memory leak in the function WritePSDChannel (bsc#1124368).\n- CVE-2018-16413: Fixed a heap-based buffer over-read in PushShortPixel() (bsc#1106989).\n- CVE-2018-16412: Fixed a heap-based buffer over-read in ParseImageResourceBlocks() (bsc#1106996).\n- CVE-2018-16644: Fixed a regression in dcm coder (bsc#1107609).\n- CVE-2019-11007: Fixed a heap-based buffer overflow in ReadMNGImage() (bsc#1132060).\n- CVE-2019-11008: Fixed a heap-based buffer overflow in WriteXWDImage() (bsc#1132054).\n- CVE-2019-11009: Fixed a heap-based buffer over-read in ReadXWDImage() (bsc#1132053).\n\n- Added extra -config- packages with Postscript/EPS/PDF readers still enabled.\n\n Removing the PS decoders is used to harden ImageMagick against security issues within\n ghostscript. Enabling them might impact security. (bsc#1122033)\n\n These are two packages that can be selected:\n\n - ImageMagick-config-6-SUSE: This has the PS decoders disabled.\n - ImageMagick-config-6-upstream: This has the PS decoders enabled.\n\n Depending on your local needs install either one of them. The default is the -SUSE configuration.\n\n","status":"published","published":"2019-04-25T10:47:46Z","modified":"2025-05-02T04:07:53.848841Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1033-2","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel() (bsc#1130330).\n- CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage() (bsc#1131317).\n- CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649).\n- CVE-2018-20467: Fixed infinite loop in coders/bmp.c (bsc#1120381).\n- CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365).\n- CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366).\n- CVE-2019-7395: Fixed a memory leak in the function WritePSDChannel (bsc#1124368).\n- CVE-2018-16413: Fixed a heap-based buffer over-read in PushShortPixel() (bsc#1106989).\n- CVE-2018-16412: Fixed a heap-based buffer over-read in ParseImageResourceBlocks() (bsc#1106996).\n- CVE-2018-16644: Fixed a regression in dcm coder (bsc#1107609).\n- CVE-2019-11007: Fixed a heap-based buffer overflow in ReadMNGImage() (bsc#1132060).\n- CVE-2019-11008: Fixed a heap-based buffer overflow in WriteXWDImage() (bsc#1132054).\n- CVE-2019-11009: Fixed a heap-based buffer over-read in ReadXWDImage() (bsc#1132053).\n\n- Added extra -config- packages with Postscript/EPS/PDF readers still enabled.\n\n Removing the PS decoders is used to harden ImageMagick against security issues within\n ghostscript. Enabling them might impact security. (bsc#1122033)\n\n These are two packages that can be selected:\n\n - ImageMagick-config-6-SUSE: This has the PS decoders disabled.\n - ImageMagick-config-6-upstream: This has the PS decoders enabled.\n\n Depending on your local needs install either one of them. The default is the -SUSE configuration.\n\n","status":"published","published":"2019-04-26T20:29:16Z","modified":"2026-02-04T04:12:46.81744Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3785-1","title":"imagemagick vulnerabilities","description":"Due to a large number of issues discovered in GhostScript that prevent\nit from being used by ImageMagick safely, this update includes a\ndefault policy change that disables support for the Postscript and\nPDF formats in ImageMagick. This policy can be overridden if necessary\nby using an alternate ImageMagick policy configuration.\n\nIt was discovered that several memory leaks existed when handling\ncertain images in ImageMagick. An attacker could use this to cause a\ndenial of service. (CVE-2018-14434, CVE-2018-14435, CVE-2018-14436,\nCVE-2018-14437, CVE-2018-16640, CVE-2018-16750)\n\nIt was discovered that ImageMagick did not properly initialize a\nvariable before using it when processing MAT images. An attacker could\nuse this to cause a denial of service or possibly execute arbitrary\ncode. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14551)\n\nIt was discovered that an information disclosure vulnerability existed\nin ImageMagick when processing XBM images. An attacker could use this\nto expose sensitive information. (CVE-2018-16323)\n\nIt was discovered that an out-of-bounds write vulnerability existed\nin ImageMagick when handling certain images. An attacker could use\nthis to cause a denial of service or possibly execute arbitrary code.\n(CVE-2018-16642)\n\nIt was discovered that ImageMagick did not properly check for errors\nin some situations. An attacker could use this to cause a denial of\nservice. (CVE-2018-16643)\n\nIt was discovered that ImageMagick did not properly validate image\nmeta data in some situations. An attacker could use this to cause a\ndenial of service. (CVE-2018-16644)\n\nIt was discovered that ImageMagick did not prevent excessive memory\nallocation when handling certain image types. An attacker could use\nthis to cause a denial of service. (CVE-2018-16645)\n\nSergej Schumilo and Cornelius Aschermann discovered that ImageMagick\ndid not properly check for NULL in some situations when processing\nPNG images. An attacker could use this to cause a denial of service.\n(CVE-2018-16749)\n\nUSN-3681-1 fixed vulnerabilities in Imagemagick. Unfortunately,\nthe fix for CVE-2017-13144 introduced a regression in ImageMagick in\nUbuntu 14.04 LTS and Ubuntu 16.04 LTS. This update reverts the fix\nfor CVE-2017-13144 for those releases.\n\nWe apologize for the inconvenience.\n","status":"published","published":"2018-10-04T23:13:25Z","modified":"2026-04-22T09:51:18.232056Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-4034-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n\nDue to a large number of issues discovered in GhostScript that prevent it\nfrom being used by ImageMagick safely, the update for Ubuntu 18.10 and\nUbuntu 19.04 includes a default policy change that disables support for the\nPostscript and PDF formats in ImageMagick. This policy can be overridden if\nnecessary by using an alternate ImageMagick policy configuration.\n","status":"published","published":"2019-06-25T11:26:41Z","modified":"2026-04-27T15:33:04.180020094Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}