CVE-2023-3428

2023-10-0418:02:23

Debian Security Bug Tracker

security-tracker.debian.org

code vulnerability

imagemagick

application crash

denial of service

unix

0.0004 Low

EPSS

Percentile

9.8%

JSON

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12allimagemagick< 8:6.9.11.60+dfsg-1.6+deb12u1imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian11allimagemagick< 8:6.9.11.60+dfsg-1.3+deb11u3imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian10allimagemagick< 8:6.9.10.23+dfsg-2.1+deb10u1imagemagick_8:6.9.10.23+dfsg-2.1+deb10u1_all.deb
Debian999allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian13allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	imagemagick	< 8:6.9.11.60+dfsg-1.6+deb12u1	imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian	11	all	imagemagick	< 8:6.9.11.60+dfsg-1.3+deb11u3	imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian	10	all	imagemagick	< 8:6.9.10.23+dfsg-2.1+deb10u1	imagemagick_8:6.9.10.23+dfsg-2.1+deb10u1_all.deb
Debian	999	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian	13	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb