CVE-2018-16749 - Reachable Assertion

Severity

43%

Complexity

86%

Confidentiality

48%

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.

CVSS 3.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Demo Examples

Reachable Assertion

CWE-617

In the excerpt below, an AssertionError (an unchecked exception) is thrown if the user hasn't entered an email address in an HTML form.


               assert email != null;

Overview

First reported 6 years ago

2018-09-09 15:29:00

Last updated 5 years ago

2019-10-03 00:03:00

Affected Software

ImageMagick

Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)

14.04

Canonical Ubuntu Linux 16.04 LTS (Long-Term Support)

16.04

Canonical Ubuntu Linux 18.04 LTS Edition

18.04

Debian Linux 8.0 (Jessie)

8.0

References

https://github.com/ImageMagick/ImageMagick/issues/1119

Exploit, Issue Tracking, Patch, Third Party Advisory

https://github.com/ImageMagick/ImageMagick6/commit/1007b98f8795ad4bea6bc5f68a32d83e982fdae4

Patch, Third Party Advisory

[debian-lts-announce] 20181003 [SECURITY] [DLA 1530-1] imagemagick security update

Third Party Advisory

USN-3785-1