Bug 629576 (CVE-2017-12691, CVE-2017-12692, CVE-2017-12693)

Summary:	<media-gfx/imagemagick-{6.9.9.9,7.0.6.9}: Denial of Service via memory consumption (CVE-2017-{12691,12692,12693})
Product:	Gentoo Security	Reporter:	D'juan McDonald (domhnall) <flopwiki>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa cve]
Package list:		Runtime testing required:	---

Description D'juan McDonald (domhnall) 2017-09-01 22:56:52 UTC

Description
The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.
Source:  MITRE      Last Modified:  09/01/2017


 
Description
The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.
Source:  MITRE      Last Modified:  09/01/2017

Description
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
Source:  MITRE      Last Modified:  09/01/2017


Upstream Patch:

https://github.com/ImageMagick/ImageMagick/issues/653

https://github.com/ImageMagick/ImageMagick/issues/652

https://github.com/ImageMagick/ImageMagick/issues/656

Comment 1 D'juan McDonald (domhnall) 2017-09-03 05:28:17 UTC

ReadBMPImage Patch:(
https://github.com/ImageMagick/ImageMagick/commit/6709bd585b9609a9cf98a7042089f3e725886d5e
 )

ReadVIFFImage Patch:(
https://github.com/ImageMagick/ImageMagick/commit/5919dc606bc1d6022d3d2d205a91fdbe98de9e15
)

ReadOneLayer Patch:(
https://github.com/ImageMagick/ImageMagick/commit/68bbe7b8b226ed79e339296793f68f1b2bebc519
)

Comment 2 Thomas Deutschmann (RETIRED) gentoo-dev

2017-10-28 15:56:58 UTC

Fixed in Gentoo via https://github.com/gentoo/gentoo/commit/c1a4d3964144758b282be963b36aaddcef3a4db8#diff-c3da9b5318c1a67d6927fb8032d46fe5

Comment 3 D'juan McDonald (domhnall) 2017-11-05 19:04:40 UTC

Added to existing GLSA request.

Gentoo Security Padawan
(jmbailey/mbailey_j)

Comment 4 GLSAMaker/CVETool Bot gentoo-dev

2017-11-11 14:17:43 UTC

This issue was resolved and addressed in
 GLSA 201711-07 at https://security.gentoo.org/glsa/201711-07
by GLSA coordinator Aaron Bauman (b-man).