CVE-2019-12976: Medium severity ibm data risk manager vulnerability
A vulnerability was found in ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1520
Upstream fix: https://github.com/ImageMagick/ImageMagick6/commit/ff840181f631b1b7f29160cae24d792fcd176bae https://github.com/ImageMagick/ImageMagick/commit/c0fe488e7052f68d4eb7768805a857ef6fef928d
Other sources
ImageMagick is vulnerable to a denial of service, caused by a memory leak in the ReadPCLImage function in coders/pcl.c. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-12976?
CVE-2019-12976 is a vulnerability in ImageMagick that allows a remote attacker to cause a denial of service condition by exploiting a memory leak in the ReadPCLImage function in coders/pcl.c.
How severe is CVE-2019-12976?
CVE-2019-12976 has a severity rating of 5.5 (medium).
How do I fix CVE-2019-12976?
To fix CVE-2019-12976, apply the recommended patches or updates provided by the vendor or software maintainer.
What software versions are affected by CVE-2019-12976?
The affected software versions include ImageMagick 7.0.8-34 and certain versions of Ubuntu, Debian, Canonical Ubuntu Linux, openSUSE Leap, and IBM Data Risk Manager.
Where can I find more information about CVE-2019-12976?
More information about CVE-2019-12976 can be found in the references provided: [Link 1], [Link 2], [Link 3]