Bug 1135232 - (CVE-2017-12806) VUL-1: CVE-2017-12806: ImageMagick: memory exhaustion in function format8BIM causing denial of service
(CVE-2017-12806)
VUL-1: CVE-2017-12806: ImageMagick: memory exhaustion in function format8BIM ...
Status: RESOLVED INVALID
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P5 - None : Minor
: ---
Assigned To: Petr Gajdos
Security Team bot
https://smash.suse.de/issue/232454/
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2019-05-15 15:35 UTC by Robert Frohl
Modified: 2019-07-01 16:14 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Robert Frohl 2019-05-15 15:38:51 UTC
SUSE:SLE-15:Update: not affected, patch included by upstream
SUSE:SLE-12:Update: already fixed by ImageMagick-meta.c-update.patch
SUSE:SLE-11:Update: already fixed by ImageMagick-meta.c-update.patch
SUSE:SLE-10-SP3:Update: not affected
Comment 2 Petr Gajdos 2019-05-17 08:58:38 UTC
No ASAN report for GraphicsMagick.
Comment 3 Petr Gajdos 2019-05-17 09:10:01 UTC
RPM changelog change submitted for 12,11/ImageMagick.
Comment 4 Petr Gajdos 2019-05-17 09:10:26 UTC
I believe all fixed.
Comment 11 Swamp Workflow Management 2019-06-25 19:12:40 UTC
SUSE-SU-2019:1712-1: An update that solves 9 vulnerabilities and has two fixes is now available.

Category: security (moderate)
Bug References: 1133204,1133205,1133498,1133501,1134075,1135232,1135236,1136183,1136732,1138425,1138464
CVE References: CVE-2017-12805,CVE-2017-12806,CVE-2019-10131,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,CVE-2019-11506,CVE-2019-11597,CVE-2019-11598
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP4 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Workstation Extension 12-SP3 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Software Development Kit 12-SP4 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Server 12-SP4 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Server 12-SP3 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Desktop 12-SP4 (src):    ImageMagick-6.8.8.1-71.123.2
SUSE Linux Enterprise Desktop 12-SP3 (src):    ImageMagick-6.8.8.1-71.123.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Swamp Workflow Management 2019-07-01 16:14:44 UTC
openSUSE-SU-2019:1683-1: An update that solves 9 vulnerabilities and has two fixes is now available.

Category: security (moderate)
Bug References: 1133204,1133205,1133498,1133501,1134075,1135232,1135236,1136183,1136732,1138425,1138464
CVE References: CVE-2017-12805,CVE-2017-12806,CVE-2019-10131,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,CVE-2019-11506,CVE-2019-11597,CVE-2019-11598
Sources used:
openSUSE Leap 42.3 (src):    ImageMagick-6.8.8.1-85.1