critical9.8
CVE-2014-9847
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
Impact
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse Project | Studio Onsite | Version 1.3 |
| Opensuse | Opensuse | Version 13.2 |
| Opensuse Project | Leap | Version 42.1 |
| Opensuse Project | Suse Linux Enterprise Debuginfo | Version 11.0 |
| Opensuse Project | Suse Linux Enterprise Desktop | Version 12.0 |
| Opensuse Project | Suse Linux Enterprise Server | Versions 11.0, 12.0 |
| Opensuse Project | Suse Linux Enterprise Software Development Kit | Versions 11.0, 12.0 |
| Opensuse Project | Suse Linux Enterprise Workstation Extension | Version 12.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 16.10 |
| Imagemagick | Imagemagick | Version 6.8.8-9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- http://www.ubuntu.com/usn/USN-3131-1
- https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=f4ece8c7c462c5449138f39401f66318b9ab0430
- https://bugzilla.redhat.com/show_bug.cgi?id=1343506
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- http://www.ubuntu.com/usn/USN-3131-1
- https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=f4ece8c7c462c5449138f39401f66318b9ab0430
- https://bugzilla.redhat.com/show_bug.cgi?id=1343506