Buffer overflow in ImageMagick - CVE-2018-16645
Published: October 14, 2018
Vulnerability identifier: #VU15353
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-16645
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in ReadBMPImage() function in coders/bmp.c and in ReadDIBImage() function in coders/dib.c. A remote attacker can create a specially crafted image, pass it to the affected application and trigger application crash due to memory allocation error.
Affected software
ImageMagick
imagemagick (Debian package)
imagemagick6 (Alpine package)
SUSE Linux
Opensuse
imagemagick (Debian package)
imagemagick6 (Alpine package)
SUSE Linux
Opensuse
How to mitigate CVE-2018-16645
Install updates from vendor's website.
ImageMagick - update to 7.0.8-12
imagemagick (Debian package) - update to 8:6.9.7.4+dfsg-11+deb9u6
imagemagick6 (Alpine package) - update to 6.9.10.37-r0
imagemagick (Debian package) - update to 8:6.9.7.4+dfsg-11+deb9u6
imagemagick6 (Alpine package) - update to 6.9.10.37-r0