http://bugzilla.opensuse.org/show_bug.cgi?id=1036978 Bug ID: 1036978 Summary: VUL-0: CVE-2017-8344: ImageMagick: denial of service (memory leak) via a crafted file (ReadPCXImage func in pcx.c) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: mikhail.kasimov@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 723252 --> http://bugzilla.opensuse.org/attachment.cgi?id=723252&action=edit CVE-2017-8344_memory-leak-in-ReadPCXImage-7_testcase Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8344 ==================================================== Description In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. Source: MITRE Last Modified: 04/30/2017 ==================================================== Hyperlink [1] https://github.com/ImageMagick/ImageMagick/issues/446 [2] Testcase: https://github.com/bestshow/p0cs/blob/master/memory-leak-in-ReadPCXImage-7.d... [3] https://github.com/ImageMagick/ImageMagick/commit/eca0f9c2f3a2d533b7d45451e2... (master) [4] https://github.com/ImageMagick/ImageMagick/commit/4c6289b2f39a47a430ce27b61d... (ImageMagick-6) (open-)SUSE: https://software.opensuse.org/package/ImageMagick 7.0.5.4 (TW, official repo) 6.8.8.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.