{"id":"CVE-2018-18024","aliases":["DEBIAN-CVE-2018-18024","DLA-2333-1","EUVD-2018-9763","GHSA-q8c2-fv73-qc5x","MGASA-2018-0496","RHSA-2020:1180","SUSE-SU-2018:3191-1","SUSE-SU-2018:3269-1","SUSE-SU-2018:3348-1","SUSE-SU-2018:3753-1","UBUNTU-CVE-2018-18024","USN-4034-1","USN-6980-1"],"status":"published","title":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders...","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03028,"percentile":0.87566,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2018-10-07T00:00:00Z","modified":"2026-10-23T18:03:55Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.10.14+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.14+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u9"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8"],"bundled":24},{"source":"osv","ecosystem":"Mageia:6","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.31-1.mga6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.82.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.72.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.72.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.74.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.34.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.34.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm8"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.14"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.14"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm8"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7"],"bundled":10}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1337","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://usn.ubuntu.com/4034-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18024","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q8c2-fv73-qc5x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-18024","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0496.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23157","tags":["report"]},{"url":"http://www.graphicsmagick.org/NEWS.html#november-17-2018","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1180","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801681","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14436","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18024","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7398","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13311","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1098545","tags":["report"]},{"url":"https://bugzilla.suse.com/1098546","tags":["report"]},{"url":"https://bugzilla.suse.com/1110746","tags":["report"]},{"url":"https://bugzilla.suse.com/1110747","tags":["report"]},{"url":"https://bugzilla.suse.com/1111069","tags":["report"]},{"url":"https://bugzilla.suse.com/1111072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18024","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183269-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106855","tags":["report"]},{"url":"https://bugzilla.suse.com/1107604","tags":["report"]},{"url":"https://bugzilla.suse.com/1107609","tags":["report"]},{"url":"https://bugzilla.suse.com/1107612","tags":["report"]},{"url":"https://bugzilla.suse.com/1107616","tags":["report"]},{"url":"https://bugzilla.suse.com/1107619","tags":["report"]},{"url":"https://bugzilla.suse.com/1108282","tags":["report"]},{"url":"https://bugzilla.suse.com/1108283","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16750","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183348-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1074170","tags":["report"]},{"url":"https://bugzilla.suse.com/1106989","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16413","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183753-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18024","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4034-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6980-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-12805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-18024","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T18:00:00Z","modified":"2024-08-05T11:01:14.781Z","updated_at":"2026-11-02T14:35:11.426178Z"}],"euvd":[{"id":"EUVD-2018-9763","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T18:00:00Z","modified":"2024-08-05T11:01:14Z","updated_at":"2026-11-03T02:39:37.172177Z"}],"ghsa":[{"id":"GHSA-q8c2-fv73-qc5x","title":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders...","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2022-05-13T01:23:17Z","modified":"2023-02-01T05:07:20Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:50:31.687075Z"}],"nvd":[{"id":"CVE-2018-18024","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T18:29:00.657Z","modified":"2026-06-17T01:46:42.003Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:04:42.52179Z"}],"osv":[{"id":"CVE-2018-18024","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T18:29:00.657Z","modified":"2026-04-16T06:18:11.417449385Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-18024","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T18:29:00.657Z","modified":"2026-10-23T18:03:55.641889965Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHSA-2020:1180","title":"Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:13:45Z","modified":"2026-06-27T10:09:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-18024","description":"In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.","status":"published","published":"2018-10-07T00:00:00Z","modified":"2026-04-22T11:48:42.770565Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-2333-1","title":"imagemagick - security update","status":"published","published":"2020-08-18T00:00:00Z","modified":"2026-03-09T01:21:30.213896Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2018-0496","title":"Updated graphicsmagick packages fix security vulnerabilities \u0026 bugs","description":"Graphicsmagick has been updated to fix several bugs and security issues.\n","status":"published","published":"2018-12-31T22:42:09Z","modified":"2026-04-16T06:26:01.452347778Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2018:3191-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n  the coders/bmp.c file. Remote attackers could leverage this vulnerability\n  to cause a denial of service via a crafted bmp file. (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747).\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).\n- CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to\n  cause an out of bounds write via a crafted file. (bsc#1098545)\n- CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to\n  cause an out of bounds write via a crafted file. (bsc#1098546)\n","status":"published","published":"2018-10-17T05:06:32Z","modified":"2026-02-04T02:49:56.160237Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3269-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following security issue:\n\n- CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function\n  (bsc#1108283)\n- CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM\n  file that has a negative pixel value. If the affected code was used as a\n  library loaded into a process that includes sensitive information, that\n  information sometimes can be leaked via the image data (bsc#1106855)\n- CVE-2018-16640: Prevent memory leak in the function ReadOneJNGImage\n  (bsc#1107619).\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n  denial of service via a crafted image file due to an out-of-bounds write\n  (bsc#1107616).\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n  ReadPICTImage did check the return value of the fputc function, which allowed\n  remote attackers to cause a denial of service via a crafted image file\n  (bsc#1107612).\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n  and ReadPICTImage, which allowed remote attackers to cause a denial of service\n  via a crafted image (bsc#1107609).\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n  ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n  of service via a crafted image file (bsc#1107604).\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n  the coders/bmp.c file. Remote attackers could leverage this vulnerability\n  to cause a denial of service via a crafted bmp file. (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747).\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).\n- CVE-2018-16749: A missing NULL check in ReadOneJNGImage allowed remote\n  attackers to cause a denial of service (WriteBlob assertion failure and\n  application exit) via a crafted file. (bsc#1108282)\n","status":"published","published":"2018-10-22T08:16:11Z","modified":"2026-02-04T04:17:21.121306Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3348-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following security issue:\n\n- CVE-2017-17934: Prevent memory leaks, related to MSLPopImage and\n  ProcessMSLScript, and associated with mishandling of MSLPushImage calls\n  (bsc#1074170).\n- CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function\n  (bsc#1108283)\n- CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed an\n  attacker to cause a denial of service (WriteBlob assertion failure and\n  application exit) via a crafted file (bsc#1108282)\n- CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel\n  function leading to DoS (bsc#1106989).\n- CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM\n  file that has a negative pixel value. If the affected code was used as a\n  library loaded into a process that includes sensitive information, that\n  information sometimes can be leaked via the image data (bsc#1106855)\n- CVE-2018-16642: The function InsertRow allowed remote attackers to cause a\n  denial of service via a crafted image file due to an out-of-bounds write\n  (bsc#1107616)\n- CVE-2018-16643: The functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and\n  ReadPICTImage did check the return value of the fputc function, which allowed\n  remote attackers to cause a denial of service via a crafted image file\n  (bsc#1107612)\n- CVE-2018-16644: Added missing check for length in the functions ReadDCMImage\n  and ReadPICTImage, which allowed remote attackers to cause a denial of service\n  via a crafted image (bsc#1107609)\n- CVE-2018-16645: Prevent excessive memory allocation issue in the functions\n  ReadBMPImage and ReadDIBImage, which allowed remote attackers to cause a denial\n  of service via a crafted image file (bsc#1107604)\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of\n  the coders/bmp.c file. Remote attackers could leverage this vulnerability\n  to cause a denial of service via a crafted bmp file (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072)\n- CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747)\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746)\n","status":"published","published":"2018-10-23T14:01:23Z","modified":"2026-02-04T02:17:57.771269Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3753-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function.\n  Remote attackers could leverage this vulnerability to cause a denial\n  of service via a crafted bmp file. (bsc#1111069)\n- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).\n- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).\n\nNon security issues fixed:\n\n- Fixed -morphology EdgeIn output (bsc#1106254)\n","status":"published","published":"2018-11-13T07:37:06Z","modified":"2026-02-04T02:30:22.82487Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-4034-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n\nDue to a large number of issues discovered in GhostScript that prevent it\nfrom being used by ImageMagick safely, the update for Ubuntu 18.10 and\nUbuntu 19.04 includes a default policy change that disables support for the\nPostscript and PDF formats in ImageMagick. This policy can be overridden if\nnecessary by using an alternate ImageMagick policy configuration.\n","status":"published","published":"2019-06-25T11:26:41Z","modified":"2026-04-27T15:33:04.180020094Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-6980-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2024-08-22T17:20:37Z","modified":"2026-06-29T13:51:15.640539678Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}