vulnerability
Centos Linux: CVE-2019-17541: Moderate: ImageMagick security, bug fix, and enhancement update (CESA-2020:1180)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | 2019-10-14 | 2020-04-01 | 2020-06-29 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
2019-10-14
Added
2020-04-01
Modified
2020-06-29
Description
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
Solution(s)
centos-upgrade-autotracecentos-upgrade-autotrace-debuginfocentos-upgrade-autotrace-develcentos-upgrade-imagemagickcentos-upgrade-imagemagick-ccentos-upgrade-imagemagick-c-develcentos-upgrade-imagemagick-debuginfocentos-upgrade-imagemagick-develcentos-upgrade-imagemagick-doccentos-upgrade-imagemagick-perlcentos-upgrade-inkscapecentos-upgrade-inkscape-debuginfocentos-upgrade-inkscape-docscentos-upgrade-inkscape-view
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.