CVE-2023-34474

🗓️ 16 Jun 2023 00:00:00Reported by redhatType

A heap-based buffer overflow issue in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c, allows application to cras

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2023-34474	16 Jun 202320:15	–	attackerkb
AlpineLinux	CVE-2023-34474	16 Jun 202320:15	–	alpinelinux
CNNVD	ImageMagick 缓冲区错误漏洞	16 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-34474	16 Jun 202300:00	–	cvelist
Debian CVE	CVE-2023-34474	16 Jun 202300:00	–	debiancve
EUVD	EUVD-2023-38532	3 Oct 202520:07	–	euvd
F5 Networks	K000156729: ImageMagick vulnerabilities CVE-2023-3428, CVE-2023-34474, CVE-2023-34475, CVE-2023-3745, and CVE-2023-39978	30 Sep 202521:57	–	f5
Fedora	[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.93-1.fc37	31 Aug 202301:20	–	fedora
Fedora	[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.15-1.fc38	24 Aug 202301:32	–	fedora
Tenable Nessus	Fedora 38 : ImageMagick (2023-27548af422)	24 Aug 202300:00	–	nessus

NVD

Vulners

Node

imagemagick imagemagickRange<7.1.1-10

Node

fedoraproject extra_packages_for_enterprise_linuxMatch8.0

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "product": "ImageMagick",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.1-10"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
access	www.access.redhat.com/security/cve/CVE-2023-34474
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/

21 Nov 2024 08:07Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.5

EPSS0.00035

SSVC