Bug 2230713 (CVE-2023-39978) - CVE-2023-39978 ImageMagick: Memory leak in Magick::Draw
Summary: CVE-2023-39978 ImageMagick: Memory leak in Magick::Draw
Keywords:
Status: NEW
Alias: CVE-2023-39978
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2230714 2230715
Blocks: 2230716
TreeView+ depends on / blocked
 
Reported: 2023-08-09 20:41 UTC by Pedro Sampaio
Modified: 2023-08-24 10:20 UTC (History)
2 users (show)

Fixed In Version: ImageMagick 6.9.12-91
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-08-09 20:41:53 UTC 
ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

References:

https://github.com/rmagick/rmagick/pull/1406/files
https://github.com/ImageMagick/ImageMagick6/commit/c90e79b3b22fec309cab55af2ee606f71b027b12
https://github.com/ImageMagick/ImageMagick6/compare/6.9.12-90...6.9.12-91
Comment 1 Pedro Sampaio 2023-08-09 20:42:12 UTC 
Created ImageMagick tracking bugs for this issue:

Affects: epel-all [bug 2230715]
Affects: fedora-all [bug 2230714]
Note You need to log in before you can comment on or make changes to this bug.