Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 5 Jun 2016 19:18:02 -0500
From: Jodie Cunningham <>
Subject: Re: Requesting CVE for ImageMagick DoS

On Thu, Feb 26, 2015 at 2:50 PM, Jodie Cunningham
<> wrote:
> Adding cve-assign to cc
> -Jodie
> Hi,
> I wanted to share four DoS bugs I found via fuzzing with AFL in
> ImageMagick, as the maintainer has since corrected them. I'd like to
> request the appropriate CVE(s) to cover these DoS bugs:
> Date, File ID, ShortDescription, Bug report URL:
> 1/24/2015 3c1c3e63 HDR file DoS, CPU
> 1/25/2015 d595506c MIFF file DoS, CPU
> 1/25/2015 c8ad6aba PDB file DoS, CPU
> 1/25/2015 783d8806 VICAR file DoS, CPU
> Regards,
> -Jodie Cunningham

While it's a party, are there any identifiers for the above?

Also here are the downstream tickets for them:


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.