CVE-2018-15607 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-15607 Interim 1 13 2025-02-17T02:40:41Z current 2021-05-30T14:15:58Z 2025-02-17T02:40:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-15607 In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Liberty Linux 7 LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 GraphicsMagick ImageMagick-6.9.10.68-3.el7 ImageMagick-c++-6.9.10.68-3.el7 ImageMagick-c++-devel-6.9.10.68-3.el7 ImageMagick-devel-6.9.10.68-3.el7 ImageMagick-doc-6.9.10.68-3.el7 ImageMagick-perl-6.9.10.68-3.el7 autotrace-0.31.1-38.el7 autotrace-devel-0.31.1-38.el7 emacs-24.3-23.el7 emacs-common-24.3-23.el7 emacs-el-24.3-23.el7 emacs-filesystem-24.3-23.el7 emacs-nox-24.3-23.el7 emacs-terminal-24.3-23.el7 inkscape-0.92.2-3.el7 inkscape-docs-0.92.2-3.el7 inkscape-view-0.92.2-3.el7 libGraphicsMagick2 perl-GraphicsMagick ImageMagick-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-c++-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-c++-devel-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-devel-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-doc-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-perl-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 autotrace-0.31.1-38.el7 as a component of SUSE Liberty Linux 7 autotrace-devel-0.31.1-38.el7 as a component of SUSE Liberty Linux 7 emacs-24.3-23.el7 as a component of SUSE Liberty Linux 7 emacs-common-24.3-23.el7 as a component of SUSE Liberty Linux 7 emacs-el-24.3-23.el7 as a component of SUSE Liberty Linux 7 emacs-filesystem-24.3-23.el7 as a component of SUSE Liberty Linux 7 emacs-nox-24.3-23.el7 as a component of SUSE Liberty Linux 7 emacs-terminal-24.3-23.el7 as a component of SUSE Liberty Linux 7 inkscape-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 inkscape-docs-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 inkscape-view-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 ImageMagick-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS ImageMagick-c++-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS ImageMagick-c++-devel-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS ImageMagick-devel-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS ImageMagick-doc-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS ImageMagick-perl-6.9.10.68-3.el7 as a component of SUSE Liberty Linux 7 LTSS autotrace-0.31.1-38.el7 as a component of SUSE Liberty Linux 7 LTSS autotrace-devel-0.31.1-38.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-common-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-el-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-filesystem-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-nox-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS emacs-terminal-24.3-23.el7 as a component of SUSE Liberty Linux 7 LTSS inkscape-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 LTSS inkscape-docs-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 LTSS inkscape-view-0.92.2-3.el7 as a component of SUSE Liberty Linux 7 LTSS GraphicsMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GraphicsMagick as a component of SUSE Studio Onsite 1.3 libGraphicsMagick2 as a component of SUSE Studio Onsite 1.3 In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file. CVE-2018-15607 SUSE Liberty Linux 7:ImageMagick-6.9.10.68-3.el7 SUSE Liberty Linux 7:ImageMagick-c++-6.9.10.68-3.el7 SUSE Liberty Linux 7:ImageMagick-c++-devel-6.9.10.68-3.el7 SUSE Liberty Linux 7:ImageMagick-devel-6.9.10.68-3.el7 SUSE Liberty Linux 7:ImageMagick-doc-6.9.10.68-3.el7 SUSE Liberty Linux 7:ImageMagick-perl-6.9.10.68-3.el7 SUSE Liberty Linux 7:autotrace-0.31.1-38.el7 SUSE Liberty Linux 7:autotrace-devel-0.31.1-38.el7 SUSE Liberty Linux 7:emacs-24.3-23.el7 SUSE Liberty Linux 7:emacs-common-24.3-23.el7 SUSE Liberty Linux 7:emacs-el-24.3-23.el7 SUSE Liberty Linux 7:emacs-filesystem-24.3-23.el7 SUSE Liberty Linux 7:emacs-nox-24.3-23.el7 SUSE Liberty Linux 7:emacs-terminal-24.3-23.el7 SUSE Liberty Linux 7:inkscape-0.92.2-3.el7 SUSE Liberty Linux 7:inkscape-docs-0.92.2-3.el7 SUSE Liberty Linux 7:inkscape-view-0.92.2-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-c++-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-c++-devel-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-devel-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-doc-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:ImageMagick-perl-6.9.10.68-3.el7 SUSE Liberty Linux 7 LTSS:autotrace-0.31.1-38.el7 SUSE Liberty Linux 7 LTSS:autotrace-devel-0.31.1-38.el7 SUSE Liberty Linux 7 LTSS:emacs-24.3-23.el7 SUSE Liberty Linux 7 LTSS:emacs-common-24.3-23.el7 SUSE Liberty Linux 7 LTSS:emacs-el-24.3-23.el7 SUSE Liberty Linux 7 LTSS:emacs-filesystem-24.3-23.el7 SUSE Liberty Linux 7 LTSS:emacs-nox-24.3-23.el7 SUSE Liberty Linux 7 LTSS:emacs-terminal-24.3-23.el7 SUSE Liberty Linux 7 LTSS:inkscape-0.92.2-3.el7 SUSE Liberty Linux 7 LTSS:inkscape-docs-0.92.2-3.el7 SUSE Liberty Linux 7 LTSS:inkscape-view-0.92.2-3.el7 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick SUSE Studio Onsite 1.3:GraphicsMagick SUSE Studio Onsite 1.3:libGraphicsMagick2 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H