Debian/imagemagick: medium 6.5
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
Action: Upgrade imagemagick to 8:6.9.9.34+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8:6.9.9.34+dfsg-3 | - |
Fixed versions
| 8:6.9.9.34+dfsg-3 |
Sources
published · modified · JSON