Medium: ImageMagick

2023-09-2722:15:00

alas.aws.amazon.com

imagemagick

vulnerability

undefined behavior

casting

double

size_t

update

packages

red hat

mitre

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.7%

JSON

Issue Overview:

A vulnerability was found in ImageMagick. This issue occurs as an undefined behavior, casting double to size_t in svg, mvg and other coders. (CVE-2023-34151)

Affected Packages:

ImageMagick

Issue Correction:
Run yum update ImageMagick to update your system.

New Packages:

i686:  
    ImageMagick-c++-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-devel-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-c++-devel-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-perl-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-doc-6.9.10.97-1.29.amzn1.i686  
    ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.i686  
  
src:  
    ImageMagick-6.9.10.97-1.29.amzn1.src  
  
x86_64:  
    ImageMagick-perl-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-c++-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-devel-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-c++-devel-6.9.10.97-1.29.amzn1.x86_64  
    ImageMagick-doc-6.9.10.97-1.29.amzn1.x86_64

Additional References

Red Hat: CVE-2023-34151

Mitre: CVE-2023-34151

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686imagemagick-c++< 6.9.10.97-1.29.amzn1ImageMagick-c++-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick-devel< 6.9.10.97-1.29.amzn1ImageMagick-devel-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick< 6.9.10.97-1.29.amzn1ImageMagick-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick-c++-devel< 6.9.10.97-1.29.amzn1ImageMagick-c++-devel-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick-perl< 6.9.10.97-1.29.amzn1ImageMagick-perl-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick-doc< 6.9.10.97-1.29.amzn1ImageMagick-doc-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1i686imagemagick-debuginfo< 6.9.10.97-1.29.amzn1ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux1x86_64imagemagick-perl< 6.9.10.97-1.29.amzn1ImageMagick-perl-6.9.10.97-1.29.amzn1.x86_64.rpm
Amazon Linux1x86_64imagemagick< 6.9.10.97-1.29.amzn1ImageMagick-6.9.10.97-1.29.amzn1.x86_64.rpm
Amazon Linux1x86_64imagemagick-debuginfo< 6.9.10.97-1.29.amzn1ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	1	i686	imagemagick-c++	< 6.9.10.97-1.29.amzn1	ImageMagick-c++-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-devel	< 6.9.10.97-1.29.amzn1	ImageMagick-devel-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick	< 6.9.10.97-1.29.amzn1	ImageMagick-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-c++-devel	< 6.9.10.97-1.29.amzn1	ImageMagick-c++-devel-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-perl	< 6.9.10.97-1.29.amzn1	ImageMagick-perl-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-doc	< 6.9.10.97-1.29.amzn1	ImageMagick-doc-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-debuginfo	< 6.9.10.97-1.29.amzn1	ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.i686.rpm
Amazon Linux	1	x86_64	imagemagick-perl	< 6.9.10.97-1.29.amzn1	ImageMagick-perl-6.9.10.97-1.29.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	imagemagick	< 6.9.10.97-1.29.amzn1	ImageMagick-6.9.10.97-1.29.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	imagemagick-debuginfo	< 6.9.10.97-1.29.amzn1	ImageMagick-debuginfo-6.9.10.97-1.29.amzn1.x86_64.rpm