CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
91.7%
USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the
corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that ImageMagick incorrectly handled certain PNG images.
If a user or automated system were tricked into opening a specially crafted
PNG file, an attacker could use this issue to cause ImageMagick to stop
responding, resulting in a denial of service, or possibly obtain the
contents of arbitrary files by including them into images.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 16.04 | noarch | imagemagick | < 8:6.8.9.9-7ubuntu5.16+esm7 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-6.q16 | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-6.q16-dbgsym | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-common | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-dbg | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-dbgsym | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | imagemagick-doc | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | libimage-magick-perl | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |
Ubuntu | 16.04 | noarch | libimage-magick-q16-perl | < 8:6.8.9.9-7ubuntu5.16 | UNKNOWN |