GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2018:0349-1

Vulnerability from csaf_suse - Published: 2018-02-02 09:41 - Updated: 2018-02-02 09:41
Summary
Security update for ImageMagick
Severity
Moderate
Notes
Title of the patch: Security update for ImageMagick
Description of the patch: This update for ImageMagick fixes several issues. These security issues were fixed: - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file (bsc#1076051) - CVE-2017-18029: Prevent memory leak in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file (bsc#1076021) - CVE-2017-17681: Prevent infinite loop in the function ReadPSDChannelZip in coders/psd.c, which allowed attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file (bsc#1072901). - CVE-2017-18008: Prevent memory Leak in ReadPWPImage which allowed attackers to cause a denial of service via a PWP file (bsc#1074309). - CVE-2018-5685: Prevent infinite loop and application hang in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value (bsc#1075939) - CVE-2017-11639: Prevent heap-based buffer over-read in the WriteCIPImage() function, related to the GetPixelLuma function in MagickCore/pixel-accessor.h (bsc#1050635) - CVE-2017-11525: Prevent memory consumption in the ReadCINImage function that allowed remote attackers to cause a denial of service (bsc#1050098) - CVE-2017-9262: The ReadJNGImage function in coders/png.c allowed attackers to cause a denial of service (memory leak) via a crafted file (bsc#1043353). - CVE-2017-9261: The ReadMNGImage function in coders/png.c allowed attackers to cause a denial of service (memory leak) via a crafted file (bsc#1043354). - CVE-2017-10995: The mng_get_long function in coders/png.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image (bsc#1047908). - CVE-2017-11539: Prevent memory leak in the ReadOnePNGImage() function in coders/png.c (bsc#1050037). - CVE-2017-11505: The ReadOneJNGImage function in coders/png.c allowed remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file (bsc#1050072). - CVE-2017-11526: The ReadOneMNGImage function in coders/png.c allowed remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file (bsc#1050100). - CVE-2017-11750: The ReadOneJNGImage function in coders/png.c allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file (bsc#1051442). - CVE-2017-12565: Prevent memory leak in the function ReadOneJNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052470). - CVE-2017-12676: Prevent memory leak in the function ReadOneJNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052708). - CVE-2017-12673: Prevent memory leak in the function ReadOneMNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052717). - CVE-2017-12671: Added NULL assignment in coders/png.c to prevent an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allowed attackers to cause a denial of service (bsc#1052721). - CVE-2017-12643: Prevent a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c (bsc#1052768). - CVE-2017-12641: Prevent a memory leak vulnerability in ReadOneJNGImage in coders\png.c (bsc#1052777). - CVE-2017-12640: Prevent an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c (bsc#1052781). - CVE-2017-12935: The ReadMNGImage function in coders/png.c mishandled large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c (bsc#1054600). - CVE-2017-13059: Prevent memory leak in the function WriteOneJNGImage in coders/png.c, which allowed attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file (bsc#1055068). - CVE-2017-13147: Prevent allocation failure in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value (bsc#1055374). - CVE-2017-13142: Added additional checks for short files to prevent a crafted PNG file from triggering a crash (bsc#1055455). - CVE-2017-13141: Prevent memory leak in ReadOnePNGImage in coders/png.c (bsc#1055456). - CVE-2017-14103: The ReadJNGImage and ReadOneJNGImage functions in coders/png.c did not properly manage image pointers after certain error conditions, which allowed remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call (bsc#1057000). - CVE-2017-14649: ReadOneJNGImage in coders/png.c did not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash) (bsc#1060162). - CVE-2017-15218: Prevent memory leak in ReadOneJNGImage in coders/png.c (bsc#1062752). - CVE-2017-17504: Prevent heap-based buffer over-read via a crafted file in Magick_png_read_raw_profile, related to ReadOneMNGImage (bsc#1072362). - CVE-2017-17884: Prevent memory leak in the function WriteOnePNGImage in coders/png.c, which allowed attackers to cause a denial of service via a crafted PNG image file (bsc#1074120). - CVE-2017-17879: Prevent heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error (bsc#1074125). - CVE-2017-17914: Prevent crafted files to cause a large loop in ReadOneMNGImage (bsc#1074185).
Patchnames: SUSE-SLE-DESKTOP-12-SP2-2018-244,SUSE-SLE-DESKTOP-12-SP3-2018-244,SUSE-SLE-RPI-12-SP2-2018-244,SUSE-SLE-SDK-12-SP2-2018-244,SUSE-SLE-SDK-12-SP3-2018-244,SUSE-SLE-SERVER-12-SP2-2018-244,SUSE-SLE-SERVER-12-SP3-2018-244,SUSE-SLE-WE-12-SP2-2018-244,SUSE-SLE-WE-12-SP3-2018-244
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-devel-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-devel-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-devel-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-devel-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-devel-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-devel-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-devel-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-devel-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:perl-PerlMagick-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:perl-PerlMagick-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:perl-PerlMagick-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:perl-PerlMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.33.1.aarch64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.33.1.ppc64le
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.33.1.s390x
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP2:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP2:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP2:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.33.1.x86_64
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.33.1.x86_64
Vendor Fix
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact moderate
Affected products
Recommended 90 products, the same list as for CVE-2017-10995
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1043353 self
https://bugzilla.suse.com/1043354 self
https://bugzilla.suse.com/1047908 self
https://bugzilla.suse.com/1050037 self
https://bugzilla.suse.com/1050072 self
https://bugzilla.suse.com/1050098 self
https://bugzilla.suse.com/1050100 self
https://bugzilla.suse.com/1050635 self
https://bugzilla.suse.com/1051442 self
https://bugzilla.suse.com/1052470 self
https://bugzilla.suse.com/1052708 self
https://bugzilla.suse.com/1052717 self
https://bugzilla.suse.com/1052721 self
https://bugzilla.suse.com/1052768 self
https://bugzilla.suse.com/1052777 self
https://bugzilla.suse.com/1052781 self
https://bugzilla.suse.com/1054600 self
https://bugzilla.suse.com/1055068 self
https://bugzilla.suse.com/1055374 self
https://bugzilla.suse.com/1055455 self
https://bugzilla.suse.com/1055456 self
https://bugzilla.suse.com/1057000 self
https://bugzilla.suse.com/1060162 self
https://bugzilla.suse.com/1062752 self
https://bugzilla.suse.com/1072362 self
https://bugzilla.suse.com/1072901 self
https://bugzilla.suse.com/1074120 self
https://bugzilla.suse.com/1074125 self
https://bugzilla.suse.com/1074185 self
https://bugzilla.suse.com/1074309 self
https://bugzilla.suse.com/1075939 self
https://bugzilla.suse.com/1076021 self
https://bugzilla.suse.com/1076051 self
https://www.suse.com/security/cve/CVE-2017-10995/ self
https://www.suse.com/security/cve/CVE-2017-11505/ self
https://www.suse.com/security/cve/CVE-2017-11525/ self
https://www.suse.com/security/cve/CVE-2017-11526/ self
https://www.suse.com/security/cve/CVE-2017-11539/ self
https://www.suse.com/security/cve/CVE-2017-11639/ self
https://www.suse.com/security/cve/CVE-2017-11750/ self
https://www.suse.com/security/cve/CVE-2017-12565/ self
https://www.suse.com/security/cve/CVE-2017-12640/ self
https://www.suse.com/security/cve/CVE-2017-12641/ self
https://www.suse.com/security/cve/CVE-2017-12643/ self
https://www.suse.com/security/cve/CVE-2017-12671/ self
https://www.suse.com/security/cve/CVE-2017-12673/ self
https://www.suse.com/security/cve/CVE-2017-12676/ self
https://www.suse.com/security/cve/CVE-2017-12935/ self
https://www.suse.com/security/cve/CVE-2017-13059/ self
https://www.suse.com/security/cve/CVE-2017-13141/ self
https://www.suse.com/security/cve/CVE-2017-13142/ self
https://www.suse.com/security/cve/CVE-2017-13147/ self
https://www.suse.com/security/cve/CVE-2017-14103/ self
https://www.suse.com/security/cve/CVE-2017-14649/ self
https://www.suse.com/security/cve/CVE-2017-15218/ self
https://www.suse.com/security/cve/CVE-2017-17504/ self
https://www.suse.com/security/cve/CVE-2017-17681/ self
https://www.suse.com/security/cve/CVE-2017-17879/ self
https://www.suse.com/security/cve/CVE-2017-17884/ self
https://www.suse.com/security/cve/CVE-2017-17914/ self
https://www.suse.com/security/cve/CVE-2017-18008/ self
https://www.suse.com/security/cve/CVE-2017-18027/ self
https://www.suse.com/security/cve/CVE-2017-18029/ self
https://www.suse.com/security/cve/CVE-2017-9261/ self
https://www.suse.com/security/cve/CVE-2017-9262/ self
https://www.suse.com/security/cve/CVE-2018-5246/ self
https://www.suse.com/security/cve/CVE-2018-5685/ self
https://www.suse.com/security/cve/CVE-2017-10995 external
https://bugzilla.suse.com/1047908 external
https://www.suse.com/security/cve/CVE-2017-11505 external
https://bugzilla.suse.com/1050072 external
https://bugzilla.suse.com/1050100 external
https://www.suse.com/security/cve/CVE-2017-11525 external
https://bugzilla.suse.com/1050098 external
https://www.suse.com/security/cve/CVE-2017-11526 external
https://bugzilla.suse.com/1050072 external
https://bugzilla.suse.com/1050100 external
https://www.suse.com/security/cve/CVE-2017-11539 external
https://bugzilla.suse.com/1050037 external
https://www.suse.com/security/cve/CVE-2017-11639 external
https://bugzilla.suse.com/1050635 external
https://www.suse.com/security/cve/CVE-2017-11750 external
https://bugzilla.suse.com/1047910 external
https://bugzilla.suse.com/1051442 external
https://www.suse.com/security/cve/CVE-2017-12565 external
https://bugzilla.suse.com/1047910 external
https://bugzilla.suse.com/1052470 external
https://www.suse.com/security/cve/CVE-2017-12640 external
https://bugzilla.suse.com/1052781 external
https://www.suse.com/security/cve/CVE-2017-12641 external
https://bugzilla.suse.com/1052777 external
https://www.suse.com/security/cve/CVE-2017-12643 external
https://bugzilla.suse.com/1052768 external
https://www.suse.com/security/cve/CVE-2017-12671 external
https://bugzilla.suse.com/1052721 external
https://www.suse.com/security/cve/CVE-2017-12673 external
https://bugzilla.suse.com/1052717 external
https://www.suse.com/security/cve/CVE-2017-12676 external
https://bugzilla.suse.com/1052708 external
https://www.suse.com/security/cve/CVE-2017-12935 external
https://bugzilla.suse.com/1054598 external
https://bugzilla.suse.com/1054600 external
https://www.suse.com/security/cve/CVE-2017-13059 external
https://bugzilla.suse.com/1055068 external
https://www.suse.com/security/cve/CVE-2017-13141 external
https://bugzilla.suse.com/1055456 external
https://bugzilla.suse.com/1060162 external
https://www.suse.com/security/cve/CVE-2017-13142 external
https://bugzilla.suse.com/1055455 external
https://www.suse.com/security/cve/CVE-2017-13147 external
https://bugzilla.suse.com/1055374 external
https://www.suse.com/security/cve/CVE-2017-14103 external
https://bugzilla.suse.com/1057000 external
https://www.suse.com/security/cve/CVE-2017-14649 external
https://bugzilla.suse.com/1060162 external
https://www.suse.com/security/cve/CVE-2017-15218 external
https://bugzilla.suse.com/1047910 external
https://bugzilla.suse.com/1062752 external
https://www.suse.com/security/cve/CVE-2017-17504 external
https://bugzilla.suse.com/1072362 external
https://www.suse.com/security/cve/CVE-2017-17681 external
https://bugzilla.suse.com/1072901 external
https://www.suse.com/security/cve/CVE-2017-17879 external
https://bugzilla.suse.com/1074125 external
https://bugzilla.suse.com/1074175 external
https://www.suse.com/security/cve/CVE-2017-17884 external
https://bugzilla.suse.com/1074120 external
https://www.suse.com/security/cve/CVE-2017-17914 external
https://bugzilla.suse.com/1074185 external
https://www.suse.com/security/cve/CVE-2017-18008 external
https://bugzilla.suse.com/1074309 external
https://www.suse.com/security/cve/CVE-2017-18027 external
https://bugzilla.suse.com/1076051 external
https://www.suse.com/security/cve/CVE-2017-18029 external
https://bugzilla.suse.com/1076021 external
https://bugzilla.suse.com/1076051 external
https://www.suse.com/security/cve/CVE-2017-9261 external
https://bugzilla.suse.com/1043354 external
https://www.suse.com/security/cve/CVE-2017-9262 external
https://bugzilla.suse.com/1043353 external
https://www.suse.com/security/cve/CVE-2018-5246 external
https://bugzilla.suse.com/1074973 external
https://www.suse.com/security/cve/CVE-2018-5685 external
https://bugzilla.suse.com/1075939 external

Loading 1.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…