Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5855-4
HistoryApr 17, 2023 - 12:00 a.m.

ImageMagick vulnerabilities

2023-04-1700:00:00
ubuntu.com
31
ubuntu
imagemagick
esm
png
vulnerability
denial of service
arbitrary files

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Releases

  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • imagemagick - Image manipulation programs and library

Details

USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the
corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that ImageMagick incorrectly handled certain PNG images.
If a user or automated system were tricked into opening a specially crafted
PNG file, an attacker could use this issue to cause ImageMagick to stop
responding, resulting in a denial of service, or possibly obtain the
contents of arbitrary files by including them into images.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchimagemagick< 8:6.8.9.9-7ubuntu5.16+esm7UNKNOWN
Ubuntu16.04noarchimagemagick< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-6.q16< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-6.q16-dbgsym< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-common< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-dbg< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-dbgsym< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchimagemagick-doc< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchlibimage-magick-perl< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Ubuntu16.04noarchlibimage-magick-q16-perl< 8:6.8.9.9-7ubuntu5.16UNKNOWN
Rows per page:
1-10 of 611

Related

thn 1
ubuntu 2
nessus 18
openvas 12
fedora 2
osv 7
wallarmlab 2
debian 2
amazon 2
cloudfoundry 2
redos 1
photon 3
debiancve 2
redhatcve 2
cve 2
veracode 2
zdt 1
githubexploit 14
alpinelinux 2
prion 2
nvd 2
attackerkb 1
hackerone 1
f5 1
ubuntucve 2
cvelist 2
exploitdb 2
gentoo 1
thn
thn
Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility
2023-02-01 19:59:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2023-02-09 00:00:00
ImageMagick vulnerabilities
2023-03-15 00:00:00
nessus
nessus
Debian DSA-5347-1 : imagemagick - security update
2023-02-15 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ImageMagick (SUSE-SU-2023:0428-1)
2023-02-16 00:00:00
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2023:0421-1)
2023-02-16 00:00:00
openvas
openvas
Fedora: Security Advisory for ImageMagick (FEDORA-2023-93389b8a9e)
2023-02-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0424-1)
2023-02-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0421-1)
2023-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.77-1.fc36
2023-02-22 11:10:31
[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.77-1.fc37
2023-02-17 18:22:02
osv
osv
imagemagick vulnerabilities
2023-03-15 21:16:46
imagemagick vulnerabilities
2023-02-09 20:50:55
imagemagick vulnerabilities
2023-04-17 11:55:50
wallarmlab
wallarmlab
Yet More ImageMagick Vulnerabilities
2023-02-06 09:49:07
Predictions for 2023 from Latest API Threat Research | API Security Newsletter
2023-03-09 13:10:48
debian
debian
[SECURITY] [DSA 5347-1] imagemagick security update
2023-02-13 18:58:10
[SECURITY] [DLA 3357-1] imagemagick security update
2023-03-11 19:39:30
amazon
amazon
Medium: ImageMagick
2023-02-17 00:12:00
Medium: ImageMagick
2023-03-02 20:22:00
cloudfoundry
cloudfoundry
USN-5855-1: ImageMagick vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
USN-5855-2: ImageMagick vulnerabilities | Cloud Foundry
2023-03-23 00:00:00
redos
redos
ROS-20230213-01
2023-02-13 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0345
2023-03-03 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0541
2023-03-03 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0021
2023-06-07 00:00:00
debiancve
debiancve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
redhatcve
redhatcve
CVE-2022-44267
2023-02-07 05:26:19
CVE-2022-44268
2023-02-07 05:26:28
cve
cve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
veracode
veracode
Denial Of Service (DoS)
2023-02-10 17:50:08
Information Disclosure
2023-02-10 17:50:09
zdt
zdt
ImageMagick 7.1.0-49 - Denial Of Service Vulnerability
2023-04-05 00:00:00
githubexploit
githubexploit
Exploit for CVE-2022-44268
2023-07-17 22:21:33
Exploit for CVE-2022-44268
2023-11-14 21:54:17
Exploit for CVE-2022-44268
2023-02-05 18:42:27
alpinelinux
alpinelinux
CVE-2022-44268
2023-02-06 21:15:09
CVE-2022-44267
2023-02-06 21:15:09
prion
prion
Input validation
2023-02-06 21:15:00
Information disclosure
2023-02-06 21:15:00
nvd
nvd
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
attackerkb
attackerkb
CVE-2022-44268
2023-02-06 00:00:00
hackerone
hackerone
HackerOne: [CVE-2022-44268] Arbitrary Remote Leak via ImageMagick
2023-02-02 06:00:01
f5
f5
K000132457 : ImageMagick vulnerability CVE-2022-44268
2023-02-08 00:00:00
ubuntucve
ubuntucve
CVE-2022-44268
2023-02-06 00:00:00
CVE-2022-44267
2023-02-06 00:00:00
cvelist
cvelist
CVE-2022-44268
2023-02-06 00:00:00
CVE-2022-44267
2023-02-06 00:00:00
exploitdb
exploitdb
ImageMagick 7.1.0-49 - DoS
2023-04-05 00:00:00
ImageMagick 7.1.0-49 - Arbitrary File Read
2023-04-05 00:00:00
gentoo
gentoo
ImageMagick: Multiple Vulnerabilities
2024-05-04 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON
Related for USN-5855-4
thn1ubuntu2nessus18openvas12fedora2osv7wallarmlab2debian2amazon2cloudfoundry2redos1photon3debiancve2redhatcve2cve2veracode2zdt1githubexploit14alpinelinux2prion2nvd2attackerkb1hackerone1f51ubuntucve2cvelist2exploitdb2gentoo1