Bug 1732284 (CVE-2019-12976)

Summary:	CVE-2019-12976 imagemagick: memory leak vulnerability in function ReadPCLImage in coders/pcl.c
Product:	[Other] Security Response	Reporter:	Dhananjay Arunesh <darunesh>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	fedora, jhorak, kyoshida, mike, pahan, rschiron
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	ImageMagick 7.0.8-35, ImageMagick 6.9.10-35	Doc Type:	If docs needed, set a value
Doc Text:	It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the ReadPCLImage() function. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An attacker could abuse this flaw by providing a specially crafted image and cause a Denial of Service by using all available memory.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-03-31 22:35:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1732285, 1733162
Bug Blocks:	1732296

Description Dhananjay Arunesh 2019-07-23 06:26:09 UTC

A vulnerability was found in ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in
coders/pcl.c.

Reference:
https://github.com/ImageMagick/ImageMagick/issues/1520

Upstream fix:
https://github.com/ImageMagick/ImageMagick6/commit/ff840181f631b1b7f29160cae24d792fcd176bae
https://github.com/ImageMagick/ImageMagick/commit/c0fe488e7052f68d4eb7768805a857ef6fef928d

Comment 1 Dhananjay Arunesh 2019-07-23 06:26:22 UTC

Created ImageMagick tracking bugs for this issue:

Affects: fedora-all [bug 1732285]

Comment 4 errata-xmlrpc 2020-03-31 19:32:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2020:1180 https://access.redhat.com/errata/RHSA-2020:1180

Comment 5 Product Security DevOps Team 2020-03-31 22:35:05 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2019-12976