Wind River Support Network

HomeDefectsLIN9-8689

Fixed

LIN9-8689 : Security Advisory - imagemagick - CVE-2019-12979

Created: Jun 27, 2019 Updated: Aug 15, 2019

Resolved Date: Jul 21, 2019

Found In Version: 9.0.0.1

Fix Version: 9.0.0.22

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-12979 User=admin}

CVEs

CVE-2019-12979