Bug 1598471 (CVE-2018-13153) - CVE-2018-13153 ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c
Summary: CVE-2018-13153 ImageMagick: memory leak in the XMagickCommand function in Mag...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2018-13153
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1598472 1598473 1603134
Blocks: 1598474
TreeView+ depends on / blocked
 
Reported: 2018-07-05 15:16 UTC by Laura Pardo
Modified: 2020-03-31 22:32 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A memory leak was discovered in ImageMagick in the XMagickCommand function in animate.c file. An array of strings, named filelist, is allocated on the heap but not released in case the function ExpandFilenames returns an error code.
Clone Of:
Environment:
Last Closed: 2020-03-31 22:32:41 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2020:1180 0 None None None 2020-03-31 19:31:48 UTC

Description Laura Pardo 2018-07-05 15:16:31 UTC 
A flaw was found in ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.


References:
https://github.com/ImageMagick/ImageMagick/issues/1195

Upstream Patch:
https://github.com/ImageMagick/ImageMagick/commit/4ab4849d667e26df0e63ece9d63ae23bc7ab0fa1
https://github.com/ImageMagick/ImageMagick6/commit/6ce6d25b47caf9b6b2979a510b6202ce0f3dd2d4
Comment 1 Laura Pardo 2018-07-05 15:17:07 UTC 
Created ImageMagick tracking bugs for this issue:

Affects: fedora-all [bug 1598472]
Comment 4 Riccardo Schirone 2018-07-19 09:32:51 UTC 
A memory leak is present in magick/animate.c:XMagickCommand, where the memory for an array of strings, named `filelist`, is allocated but not correctly released in case the function ExpandFilenames return an error code.
Comment 5 errata-xmlrpc 2020-03-31 19:31:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2020:1180 https://access.redhat.com/errata/RHSA-2020:1180
Comment 6 Product Security DevOps Team 2020-03-31 22:32:41 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2018-13153
Note You need to log in before you can comment on or make changes to this bug.