Medium: ImageMagick

2023-09-1323:15:00

alas.aws.amazon.com

imagemagick

denial of service

update

cve-2022-48541

red hat

mitre

unix

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

0.001 Low

EPSS

Percentile

35.0%

JSON

Issue Overview:

A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the “identify -help” command. (CVE-2022-48541)

Affected Packages:

ImageMagick

Issue Correction:
Run yum update ImageMagick to update your system.

New Packages:

i686:  
    ImageMagick-devel-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-perl-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-c++-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-doc-6.9.10.97-1.28.amzn1.i686  
    ImageMagick-c++-devel-6.9.10.97-1.28.amzn1.i686  
  
src:  
    ImageMagick-6.9.10.97-1.28.amzn1.src  
  
x86_64:  
    ImageMagick-perl-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-c++-devel-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-c++-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-doc-6.9.10.97-1.28.amzn1.x86_64  
    ImageMagick-devel-6.9.10.97-1.28.amzn1.x86_64

Additional References

Red Hat: CVE-2022-48541

Mitre: CVE-2022-48541

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686imagemagick-devel< 6.9.10.97-1.28.amzn1ImageMagick-devel-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick-debuginfo< 6.9.10.97-1.28.amzn1ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick< 6.9.10.97-1.28.amzn1ImageMagick-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick-perl< 6.9.10.97-1.28.amzn1ImageMagick-perl-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick-c++< 6.9.10.97-1.28.amzn1ImageMagick-c++-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick-doc< 6.9.10.97-1.28.amzn1ImageMagick-doc-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1i686imagemagick-c++-devel< 6.9.10.97-1.28.amzn1ImageMagick-c++-devel-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux1x86_64imagemagick-perl< 6.9.10.97-1.28.amzn1ImageMagick-perl-6.9.10.97-1.28.amzn1.x86_64.rpm
Amazon Linux1x86_64imagemagick-debuginfo< 6.9.10.97-1.28.amzn1ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.x86_64.rpm
Amazon Linux1x86_64imagemagick< 6.9.10.97-1.28.amzn1ImageMagick-6.9.10.97-1.28.amzn1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	1	i686	imagemagick-devel	< 6.9.10.97-1.28.amzn1	ImageMagick-devel-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-debuginfo	< 6.9.10.97-1.28.amzn1	ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick	< 6.9.10.97-1.28.amzn1	ImageMagick-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-perl	< 6.9.10.97-1.28.amzn1	ImageMagick-perl-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-c++	< 6.9.10.97-1.28.amzn1	ImageMagick-c++-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-doc	< 6.9.10.97-1.28.amzn1	ImageMagick-doc-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	i686	imagemagick-c++-devel	< 6.9.10.97-1.28.amzn1	ImageMagick-c++-devel-6.9.10.97-1.28.amzn1.i686.rpm
Amazon Linux	1	x86_64	imagemagick-perl	< 6.9.10.97-1.28.amzn1	ImageMagick-perl-6.9.10.97-1.28.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	imagemagick-debuginfo	< 6.9.10.97-1.28.amzn1	ImageMagick-debuginfo-6.9.10.97-1.28.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	imagemagick	< 6.9.10.97-1.28.amzn1	ImageMagick-6.9.10.97-1.28.amzn1.x86_64.rpm