← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2015-8900

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2015-8900
1
 
PublicDateAtUSN: 2015-12-31
2
 
Candidate: CVE-2015-8900
3
 
PublicDate: 2017-02-27
4
 
References:
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8900
6
 
 http://www.openwall.com/lists/oss-security/2015/02/20/4
7
 
 http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26929
8
 
 https://usn.ubuntu.com/usn/usn-3131-1
9
 
Description:
10
 
 The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows
11
 
 remote attackers to cause a denial of service (infinite loop) via a crafted
12
 
 HDR file.
13
 
Ubuntu-Description:
14
 
Notes:
15
 
 mdeslaur> This is 0059-Fix-a-DOS-in-HDR-file.patch
16
 
Bugs:
17
 
Priority: medium
18
 
Discovered-by:
19
 
Assigned-to:
20
 
 
21
 
Patches_imagemagick:
22
 
 upstream: http://web.archive.org/web/20150501030131/http://trac.imagemagick.org/changeset/17845
23
 
 upstream: http://web.archive.org/web/20150429001241/http://trac.imagemagick.org/changeset/17846
24
 
upstream_imagemagick: released (8:6.8.9.9-6)
25
 
precise_imagemagick: released (8:6.6.9.7-5ubuntu3.5)
26
 
trusty_imagemagick: released (8:6.7.7.10-6ubuntu3.2)
27
 
vivid/stable-phone-overlay_imagemagick: DNE
28
 
vivid/ubuntu-core_imagemagick: DNE
29
 
wily_imagemagick: ignored (reached end-of-life)
30
 
xenial_imagemagick: not-affected (8:6.8.9.9-7ubuntu5)
31
 
yakkety_imagemagick: not-affected (8:6.8.9.9-7ubuntu8)
32
 
devel_imagemagick: not-affected (8:6.8.9.9-7ubuntu9)