Lucene search
Ubuntu.comUB:CVE-2023-34152HistoryMay 30, 2023 - 12:00 a.m.
CVE-2023-34152
2023-05-3000:00:00
ubuntu.com
ubuntu.com
16
imagemagick
remote code execution
openblob
security flaw
cve-2023-34152
ubuntu
upstream
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
75.1%
A vulnerability was found in ImageMagick. This security flaw cause a remote
code execution vulnerability in OpenBlob with --enable-pipes configured.
Bugs
Notes
| Author | Note |
|---|---|
| rodrigo-zaiden | the build option --enable-pipes first appeared in version 6.9.4-6, hence, before bionic the option didn’t even exist. upstream claims that the usage of --enable-pipes is a security risk by design. it is not enabled by default in Ubuntu. |
Related
cvelist
cvelist
CVE-2023-34152
2023-05-30 00:00:00
prion
prion
Remote code execution
2023-05-30 22:15:00
cve
cve
CVE-2023-34152
2023-05-30 22:15:11
debiancve
debiancve
CVE-2023-34152
2023-05-30 22:15:11
redhatcve
redhatcve
CVE-2023-34152
2023-05-29 05:40:26
alpinelinux
alpinelinux
CVE-2023-34152
2023-05-30 22:15:00
osv
osv
CVE-2023-34152
2023-05-30 22:15:11
nvd
nvd
CVE-2023-34152
2023-05-30 22:15:11
githubexploit
githubexploit
Exploit for OS Command Injection in Imagemagick
2024-05-23 08:33:06
Exploit for OS Command Injection in Imagemagick
2023-09-27 03:37:25
nessus
nessus
ImageMagick < 7.1.1-11 Multiple Vulnerabilities
2023-08-10 00:00:00
Fedora 38 : ImageMagick (2023-d53831b69d)
2023-06-03 00:00:00
Fedora 37 : ImageMagick (2023-edbdccae2a)
2023-08-31 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.11-1.fc38
2023-06-03 02:46:14
[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.93-1.fc37
2023-08-31 01:20:29
openvas
openvas
Fedora: Security Advisory for ImageMagick (FEDORA-2023-d53831b69d)
2023-06-04 00:00:00
Fedora: Security Advisory for ImageMagick (FEDORA-2023-edbdccae2a)
2023-09-01 00:00:00
redos
redos
ROS-20230621-06
2023-06-21 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0021
2023-06-07 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0402
2023-06-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0595
2023-06-11 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
75.1%
Related for UB:CVE-2023-34152