ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "imagemagick-dbg", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "imagemagick-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagick++-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagick++5", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagick++5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore5", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore5-extra", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickcore5-extra-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickwand-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickwand5", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "libmagickwand5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "perlmagick", "binary_version": "8:6.7.7.10-6ubuntu3.7" }, { "binary_name": "perlmagick-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.7" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-dbg", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-6.q16-5v5", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-6.q16-5v5-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6-arch-config-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-2", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-2-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-2-extra", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-2-extra-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-6.q16-2", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-6.q16-2-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.8.9.9-7ubuntu5.7" }, { "binary_name": "perlmagick", "binary_version": "8:6.8.9.9-7ubuntu5.7" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }