CVE-2018-16643

Priority
Description
The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c,
ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in
ImageMagick 7.0.8-4 do not check the return value of the fputc function,
which allows remote attackers to cause a denial of service via a crafted
image file.
Package
Upstream:released (8:6.9.10.8+dfsg-1)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 LTS (Trusty Tahr):released (8:6.7.7.10-6ubuntu3.13)
Ubuntu 16.04 LTS (Xenial Xerus):released (8:6.8.9.9-7ubuntu5.13)
Ubuntu 18.04 LTS (Bionic Beaver):released (8:6.9.7.4+dfsg-16ubuntu6.4)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (8:6.9.10.8+dfsg-1ubuntu2)
Patches:
Upstream:https://github.com/ImageMagick/ImageMagick/commit/6b6bff054d569a77973f2140c0e86366e6168a6c
Upstream:https://github.com/ImageMagick/ImageMagick6/commit/11d9dac3d991c62289d1ef7a097670166480e76c
More Information

Updated: 2019-01-14 22:31:30 UTC (commit 51f9b73af244ba86b9321e46e526586c25a8e060)