CVE-2023-34152

🗓️ 30 May 2023 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 135 Views

Vulnerability found in ImageMagick causing remote code execution in OpenBlob with --enable-pipes

Reporter	Title	Published	Views	Family All 41
GithubExploit	Exploit for Improper Input Validation in Imagemagick	27 Sep 202303:37	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Imagemagick	23 May 202408:33	–	githubexploit
ATTACKERKB	CVE-2023-34152	30 May 202322:15	–	attackerkb
AlpineLinux	CVE-2023-34152	30 May 202322:15	–	alpinelinux
Circl	CVE-2023-34152	1 Jun 202313:16	–	circl
CNNVD	ImageMagick 操作系统命令注入漏洞	30 May 202300:00	–	cnnvd
Cvelist	CVE-2023-34152	30 May 202300:00	–	cvelist
Debian CVE	CVE-2023-34152	30 May 202300:00	–	debiancve
F5 Networks	K000156728: Multiple ImageMagick vulnerabilities	30 Sep 202521:56	–	f5
Fedora	[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.11-1.fc38	3 Jun 202302:46	–	fedora

NVD

Vulners

Node

imagemagick imagemagickRange<7.1.1-11

Node

fedoraproject extra_packages_for_enterprise_linuxMatch8.0

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Node

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

[
  {
    "vendor": "n/a",
    "product": "ImageMagick",
    "versions": [
      {
        "version": "ImageMagick-6.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/ImageMagick/ImageMagick/issues/6339
access	www.access.redhat.com/security/cve/CVE-2023-34152
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/

13 Jan 2025 19:15Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.64865

SSVC