CVE-2019-18853 - ImageMagick: XML_PARSE_HUGE not properly restricted in coders/svg.c

Back Back to CVE browser

HIGH

ImageMagick: XML_PARSE_HUGE not properly restricted in coders/svg.c

Published Nov 11, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.47%

Description

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.

Affected products

Red Hat Enterprise Linux 5

ImageMagick

Out of support scope
Red Hat Enterprise Linux 6

ImageMagick

Out of support scope
Red Hat Enterprise Linux 7

ImageMagick

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ImageMagick	Out of support scope	n/a
Red Hat Enterprise Linux 6	ImageMagick	Out of support scope	n/a
Red Hat Enterprise Linux 7	ImageMagick	Will not fix	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-674

References (6)

https://access.redhat.com/security/cve/CVE-2019-18853
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1820568
Issue Tracking
https://fortiguard.com/zeroday/FG-VD-19-136
x_refsource_MISCThird Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/ec9c8944af2bfc65c697ca44f93a727a99b405f1
x_refsource_MISCPatchTool Signature
https://nvd.nist.gov/vuln/detail/CVE-2019-18853
https://www.cve.org/CVERecord?id=CVE-2019-18853

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-18853		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1820568		Issue Tracking
https://fortiguard.com/zeroday/FG-VD-19-136		x_refsource_MISCThird Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/ec9c8944af2bfc65c697ca44f93a727a99b405f1		x_refsource_MISCPatchTool Signature
https://nvd.nist.gov/vuln/detail/CVE-2019-18853
https://www.cve.org/CVERecord?id=CVE-2019-18853