Bug 1378736 (CVE-2015-8958) - CVE-2015-8958 ImageMagick: OOB read and possible crash when processing malformed SUN files
Summary: CVE-2015-8958 ImageMagick: OOB read and possible crash when processing malfor...
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2015-8958
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1378790
Blocks: 1378785
TreeView+ depends on / blocked
 
Reported: 2016-09-23 08:44 UTC by Adam Mariš
Modified: 2021-02-17 03:17 UTC (History)
13 users (show)

Fixed In Version: ImageMagick 7.0.1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-08-23 11:25:46 UTC
Embargoed:

Attachments (Terms of Use)

Description Adam Mariš 2016-09-23 08:44:10 UTC 
Bug report(s):

http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26857
https://bugs.debian.org/832465

Upstream patch(es):

https://github.com/ImageMagick/ImageMagick/commit/b8f17d08b7418204bf8a05a5c24e87b2fc395b75
https://github.com/ImageMagick/ImageMagick/commit/1aa0c6dab6dcef4d9bc3571866ae1c1ddbec7d8f
https://github.com/ImageMagick/ImageMagick/commit/6b4aff0f117b978502ee5bcd6e753c17aec5a961
https://github.com/ImageMagick/ImageMagick/commit/8ea44b48a182dd46d018f4b4f09a5e2ee9638105

CVE assignment:

http://seclists.org/oss-sec/2016/q3/590
Comment 1 Adam Mariš 2016-09-23 09:32:40 UTC 
Created ImageMagick tracking bugs for this issue:

Affects: fedora-all [bug 1378790]
Comment 3 Stefan Cornelius 2017-08-23 11:25:58 UTC 
Statement:

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Note You need to log in before you can comment on or make changes to this bug.