ISOMAN

CVE

CVE-2019-13305

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
  2. https://github.com/ImageMagick/ImageMagick/commit/29efd648f38b73a64d73f14cd2019d869a585888
  3. https://github.com/ImageMagick/ImageMagick/issues/1613
  4. https://github.com/ImageMagick/ImageMagick6/commit/5c7fbf9a14fb83c9685ad69d48899f490a37609d
  5. https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html
  6. https://usn.ubuntu.com/4192-1/
  7. https://www.debian.org/security/2020/dsa-4712
  8. https://www.debian.org/security/2020/dsa-4715
  9. http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
  10. https://github.com/ImageMagick/ImageMagick/commit/29efd648f38b73a64d73f14cd2019d869a585888
  11. https://github.com/ImageMagick/ImageMagick/issues/1613
  12. https://github.com/ImageMagick/ImageMagick6/commit/5c7fbf9a14fb83c9685ad69d48899f490a37609d
  13. https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html
  14. https://usn.ubuntu.com/4192-1/
  15. https://www.debian.org/security/2020/dsa-4712
  16. https://www.debian.org/security/2020/dsa-4715