NVD Vulnerability Detail

CVE-2019-7395

Summary	In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
Publication Date	Feb. 5, 2019, 9:29 a.m.
Registration Date	Jan. 26, 2021, 11:44 a.m.
Last Update	Nov. 21, 2024, 1:48 p.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:imagemagick:imagemagick::::::::				6.9.10-25
cpe:2.3:a:imagemagick:imagemagick::::::::	7.0.0-0			7.0.8-25

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:opensuse:leap:15.0:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:10.0:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html	Broken Link Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html	Broken Link
3	http://www.securityfocus.com/bid/106850	Third Party Advisory VDB Entry
4	https://github.com/ImageMagick/ImageMagick/commit/8a43abefb38c5e29138e1c9c515b313363541c06	Patch Third Party Advisory
5	https://github.com/ImageMagick/ImageMagick/issues/1451	Exploit Patch Third Party Advisory
6	https://usn.ubuntu.com/4034-1/	Third Party Advisory
7	https://www.debian.org/security/2020/dsa-4712	Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html	Broken Link Third Party Advisory
9	https://www.debian.org/security/2020/dsa-4712	Third Party Advisory
10	https://usn.ubuntu.com/4034-1/	Third Party Advisory
11	https://github.com/ImageMagick/ImageMagick/issues/1451	Exploit Patch Third Party Advisory
12	https://github.com/ImageMagick/ImageMagick/commit/8a43abefb38c5e29138e1c9c515b313363541c06	Patch Third Party Advisory
13	http://www.securityfocus.com/bid/106850	Third Party Advisory VDB Entry
14	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html	Broken Link

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

ImageMagick におけるリソース管理に関する脆弱性

Title	ImageMagick におけるリソース管理に関する脆弱性
Summary	ImageMagick には、リソース管理に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 21, 2019, midnight
Registration Date	March 14, 2019, 5:47 p.m.
Last Update	March 14, 2019, 5:47 p.m.

Affected System

ImageMagick

ImageMagick 7.0.8-25 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-7395	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7395
2	CVE-2019-7395	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7395
National Vulnerability Database (NVD)
3	CVE-2019-7395	https://nvd.nist.gov/vuln/detail/CVE-2019-7395
4	CVE-2019-7395	https://nvd.nist.gov/vuln/detail/CVE-2019-7395

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html
2	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
GitHub
1	#1451	https://github.com/ImageMagick/ImageMagick/commit/8a43abefb38c5e29138e1c9c515b313363541c06
2	#1451	https://github.com/ImageMagick/ImageMagick/commit/8a43abefb38c5e29138e1c9c515b313363541c06
3	memory leak in WritePSDChannel in coders/psd.c #1451	https://github.com/ImageMagick/ImageMagick/issues/1451
4	memory leak in WritePSDChannel in coders/psd.c #1451	https://github.com/ImageMagick/ImageMagick/issues/1451

Change Log

No	Changed Details	Date of change
1	[2019年03月14日] 掲載	March 14, 2019, 5:47 p.m.