Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0142
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0142)
Zusammenfassung:	The remote host is missing an update for the 'imagemagick' package(s) announced via the MGASA-2019-0142 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'imagemagick' package(s) announced via the MGASA-2019-0142 advisory. Vulnerability Insight: In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. (CVE-2019-10649) In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file. (CVE-2019-10650) Affected Software/OS: 'imagemagick' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-10649 BugTraq ID: 107645 http://www.securityfocus.com/bid/107645 Debian Security Information: DSA-4712 (Google Search) https://www.debian.org/security/2020/dsa-4712 https://github.com/ImageMagick/ImageMagick/issues/1533 https://usn.ubuntu.com/4034-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-10650 BugTraq ID: 107646 http://www.securityfocus.com/bid/107646 Bugtraq: 20190429 [SECURITY] [DSA 4436-1] imagemagick security update (Google Search) https://seclists.org/bugtraq/2019/Apr/37 Debian Security Information: DSA-4436 (Google Search) https://www.debian.org/security/2019/dsa-4436 https://github.com/ImageMagick/ImageMagick/issues/1532 https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html SuSE Security Announcement: openSUSE-SU-2019:1320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html SuSE Security Announcement: openSUSE-SU-2019:1331 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.