Lucene search
UbuntuUSN-5855-1HistoryFeb 09, 2023 - 12:00 a.m.
ImageMagick vulnerabilities
2023-02-0900:00:00
ubuntu.com
41
imagemagick
png images
denial of service
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.5%
Releases
- Ubuntu 18.04 ESM
Packages
- imagemagick - Image manipulation programs and library
Details
It was discovered that ImageMagick incorrectly handled certain PNG images.
If a user or automated system were tricked into opening a specially crafted
PNG file, an attacker could use this issue to cause ImageMagick to stop
responding, resulting in a denial of service, or possibly obtain the
contents of arbitrary files by including them into images.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | imagemagick-6.q16 | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-6-common | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-6-doc | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-6.q16-dbgsym | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-6.q16hdri | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-6.q16hdri-dbgsym | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-common | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | imagemagick-doc | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libimage-magick-perl | < 8:6.9.7.4+dfsg-16ubuntu6.15 | UNKNOWN |
Related
thn
thn
Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility
2023-02-01 19:59:00
nessus
nessus
Debian DSA-5347-1 : imagemagick - security update
2023-02-15 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ImageMagick (SUSE-SU-2023:0428-1)
2023-02-16 00:00:00
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2023:0421-1)
2023-02-16 00:00:00
openvas
openvas
Fedora: Security Advisory for ImageMagick (FEDORA-2023-93389b8a9e)
2023-02-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0424-1)
2023-02-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0421-1)
2023-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.77-1.fc36
2023-02-22 11:10:31
[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.77-1.fc37
2023-02-17 18:22:02
ubuntu
ubuntu
ImageMagick vulnerabilities
2023-04-17 00:00:00
ImageMagick vulnerabilities
2023-03-15 00:00:00
osv
osv
imagemagick vulnerabilities
2023-03-15 21:16:46
imagemagick vulnerabilities
2023-02-09 20:50:55
imagemagick vulnerabilities
2023-04-17 11:55:50
wallarmlab
wallarmlab
Yet More ImageMagick Vulnerabilities
2023-02-06 09:49:07
debian
debian
[SECURITY] [DSA 5347-1] imagemagick security update
2023-02-13 18:58:10
[SECURITY] [DLA 3357-1] imagemagick security update
2023-03-11 19:39:30
amazon
amazon
Medium: ImageMagick
2023-02-17 00:12:00
Medium: ImageMagick
2023-03-02 20:22:00
cloudfoundry
cloudfoundry
USN-5855-1: ImageMagick vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
USN-5855-2: ImageMagick vulnerabilities | Cloud Foundry
2023-03-23 00:00:00
redos
redos
ROS-20230213-01
2023-02-13 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0345
2023-03-03 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0541
2023-03-03 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0021
2023-06-07 00:00:00
redhatcve
redhatcve
CVE-2022-44267
2023-02-07 05:26:19
CVE-2022-44268
2023-02-07 05:26:28
cve
cve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
veracode
veracode
Denial Of Service (DoS)
2023-02-10 17:50:08
Information Disclosure
2023-02-10 17:50:09
zdt
zdt
ImageMagick 7.1.0-49 - Denial Of Service Vulnerability
2023-04-05 00:00:00
debiancve
debiancve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
githubexploit
githubexploit
Exploit for CVE-2022-44268
2023-07-17 22:21:33
Exploit for CVE-2022-44268
2023-11-14 21:54:17
Exploit for CVE-2022-44268
2023-02-05 18:42:27
alpinelinux
alpinelinux
CVE-2022-44268
2023-02-06 21:15:09
CVE-2022-44267
2023-02-06 21:15:09
prion
prion
Input validation
2023-02-06 21:15:00
Information disclosure
2023-02-06 21:15:00
nvd
nvd
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
ubuntucve
ubuntucve
CVE-2022-44268
2023-02-06 00:00:00
CVE-2022-44267
2023-02-06 00:00:00
cvelist
cvelist
CVE-2022-44268
2023-02-06 00:00:00
CVE-2022-44267
2023-02-06 00:00:00
attackerkb
attackerkb
CVE-2022-44268
2023-02-06 00:00:00
hackerone
hackerone
HackerOne: [CVE-2022-44268] Arbitrary Remote Leak via ImageMagick
2023-02-02 06:00:01
f5
f5
K000132457 : ImageMagick vulnerability CVE-2022-44268
2023-02-08 00:00:00
exploitdb
exploitdb
ImageMagick 7.1.0-49 - DoS
2023-04-05 00:00:00
ImageMagick 7.1.0-49 - Arbitrary File Read
2023-04-05 00:00:00
gentoo
gentoo
ImageMagick: Multiple Vulnerabilities
2024-05-04 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.5%
Related for USN-5855-1