Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:1361412562310833637HistoryMar 04, 2024 - 12:00 a.m.
openSUSE: Security Advisory for ImageMagick (SUSE-SU-2023:0428-1)
2024-03-0400:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
3
opensuse
security advisory
imagemagick
suse-su-2023:0428-1
cve-2022-44267
cve-2022-44268
png image
denial of service
arbitrary file disclosure
package
vendorfix
opensuse leap 15.4
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.1%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.833637");
script_version("2024-04-16T05:05:31+0000");
script_cve_id("CVE-2022-44267", "CVE-2022-44268");
script_tag(name:"cvss_base", value:"7.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:N/A:N");
script_tag(name:"last_modification", value:"2024-04-16 05:05:31 +0000 (Tue, 16 Apr 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2023-02-14 19:20:42 +0000 (Tue, 14 Feb 2023)");
script_tag(name:"creation_date", value:"2024-03-04 08:03:05 +0000 (Mon, 04 Mar 2024)");
script_name("openSUSE: Security Advisory for ImageMagick (SUSE-SU-2023:0428-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=openSUSELeap15\.4");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2023:0428-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/PF2DFKFZIRBODDAD7JYGG4DZDCYKHXOW");
script_tag(name:"summary", value:"The remote host is missing an update for the 'ImageMagick'
package(s) announced via the SUSE-SU-2023:0428-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for ImageMagick fixes the following issues:
- CVE-2022-44267: Fixed a denial of service when parsing a PNG image
(bsc#1207982).
- CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image
(bsc#1207983).");
script_tag(name:"affected", value:"'ImageMagick' package(s) on openSUSE Leap 15.4.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.4") {
if(!isnull(res = isrpmvuln(pkg:"ImageMagick", rpm:"ImageMagick~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-config-7-SUSE", rpm:"ImageMagick-config-7-SUSE~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-config-7-upstream", rpm:"ImageMagick-config-7-upstream~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-debuginfo", rpm:"ImageMagick-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-debugsource", rpm:"ImageMagick-debugsource~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-devel", rpm:"ImageMagick-devel~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-extra", rpm:"ImageMagick-extra~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-extra-debuginfo", rpm:"ImageMagick-extra-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5", rpm:"libMagick++-7_Q16HDRI5~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-debuginfo", rpm:"libMagick++-7_Q16HDRI5-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-devel", rpm:"libMagick++-devel~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10", rpm:"libMagickCore-7_Q16HDRI10~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-debuginfo", rpm:"libMagickCore-7_Q16HDRI10-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10", rpm:"libMagickWand-7_Q16HDRI10~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-debuginfo", rpm:"libMagickWand-7_Q16HDRI10-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-PerlMagick", rpm:"perl-PerlMagick~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-PerlMagick-debuginfo", rpm:"perl-PerlMagick-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-devel-32bit", rpm:"ImageMagick-devel-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-32bit", rpm:"libMagick++-7_Q16HDRI5-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-32bit-debuginfo", rpm:"libMagick++-7_Q16HDRI5-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-devel-32bit", rpm:"libMagick++-devel-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-32bit", rpm:"libMagickCore-7_Q16HDRI10-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-32bit-debuginfo", rpm:"libMagickCore-7_Q16HDRI10-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-32bit", rpm:"libMagickWand-7_Q16HDRI10-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-32bit-debuginfo", rpm:"libMagickWand-7_Q16HDRI10-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-doc", rpm:"ImageMagick-doc~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick", rpm:"ImageMagick~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-config-7-SUSE", rpm:"ImageMagick-config-7-SUSE~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-config-7-upstream", rpm:"ImageMagick-config-7-upstream~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-debuginfo", rpm:"ImageMagick-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-debugsource", rpm:"ImageMagick-debugsource~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-devel", rpm:"ImageMagick-devel~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-extra", rpm:"ImageMagick-extra~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-extra-debuginfo", rpm:"ImageMagick-extra-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5", rpm:"libMagick++-7_Q16HDRI5~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-debuginfo", rpm:"libMagick++-7_Q16HDRI5-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-devel", rpm:"libMagick++-devel~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10", rpm:"libMagickCore-7_Q16HDRI10~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-debuginfo", rpm:"libMagickCore-7_Q16HDRI10-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10", rpm:"libMagickWand-7_Q16HDRI10~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-debuginfo", rpm:"libMagickWand-7_Q16HDRI10-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-PerlMagick", rpm:"perl-PerlMagick~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"perl-PerlMagick-debuginfo", rpm:"perl-PerlMagick-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-devel-32bit", rpm:"ImageMagick-devel-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-32bit", rpm:"libMagick++-7_Q16HDRI5-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-7_Q16HDRI5-32bit-debuginfo", rpm:"libMagick++-7_Q16HDRI5-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagick++-devel-32bit", rpm:"libMagick++-devel-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-32bit", rpm:"libMagickCore-7_Q16HDRI10-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickCore-7_Q16HDRI10-32bit-debuginfo", rpm:"libMagickCore-7_Q16HDRI10-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-32bit", rpm:"libMagickWand-7_Q16HDRI10-32bit~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libMagickWand-7_Q16HDRI10-32bit-debuginfo", rpm:"libMagickWand-7_Q16HDRI10-32bit-debuginfo~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ImageMagick-doc", rpm:"ImageMagick-doc~7.1.0.9~150400.6.12.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);Related
ubuntu
ubuntu
ImageMagick vulnerabilities
2023-04-17 00:00:00
ImageMagick vulnerabilities
2023-02-09 00:00:00
ImageMagick vulnerabilities
2023-03-15 00:00:00
osv
osv
imagemagick vulnerabilities
2023-02-09 20:50:55
imagemagick vulnerabilities
2023-03-15 21:16:46
imagemagick vulnerabilities
2023-04-17 11:55:50
fedora
fedora
[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.77-1.fc36
2023-02-22 11:10:31
[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.77-1.fc37
2023-02-17 18:22:02
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0428-1)
2023-02-16 00:00:00
Fedora: Security Advisory for ImageMagick (FEDORA-2023-93389b8a9e)
2023-02-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0424-1)
2023-02-16 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2023:0421-1)
2023-02-16 00:00:00
Fedora 37 : 1:ImageMagick (2023-6537113d6d)
2023-02-17 00:00:00
thn
thn
Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility
2023-02-01 19:59:00
wallarmlab
wallarmlab
Yet More ImageMagick Vulnerabilities
2023-02-06 09:49:07
debian
debian
[SECURITY] [DSA 5347-1] imagemagick security update
2023-02-13 18:58:10
[SECURITY] [DLA 3357-1] imagemagick security update
2023-03-11 19:39:30
redos
redos
ROS-20230213-01
2023-02-13 00:00:00
cloudfoundry
cloudfoundry
USN-5855-2: ImageMagick vulnerabilities | Cloud Foundry
2023-03-23 00:00:00
USN-5855-1: ImageMagick vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
amazon
amazon
Medium: ImageMagick
2023-02-17 00:12:00
Medium: ImageMagick
2023-03-02 20:22:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0345
2023-03-03 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0541
2023-03-03 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0021
2023-06-07 00:00:00
debiancve
debiancve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
veracode
veracode
Denial Of Service (DoS)
2023-02-10 17:50:08
Information Disclosure
2023-02-10 17:50:09
zdt
zdt
ImageMagick 7.1.0-49 - Denial Of Service Vulnerability
2023-04-05 00:00:00
cve
cve
CVE-2022-44267
2023-02-06 21:15:09
CVE-2022-44268
2023-02-06 21:15:09
redhatcve
redhatcve
CVE-2022-44267
2023-02-07 05:26:19
CVE-2022-44268
2023-02-07 05:26:28
alpinelinux
alpinelinux
CVE-2022-44268
2023-02-06 21:15:09
CVE-2022-44267
2023-02-06 21:15:09
githubexploit
githubexploit
Exploit for Vulnerability in Imagemagick
2023-02-05 18:42:27
Exploit for Vulnerability in Imagemagick
2023-07-14 17:46:15
Exploit for Vulnerability in Imagemagick
2023-06-25 20:52:57
prion
prion
Input validation
2023-02-06 21:15:00
Information disclosure
2023-02-06 21:15:00
f5
f5
K000132457 : ImageMagick vulnerability CVE-2022-44268
2023-02-08 00:00:00
attackerkb
attackerkb
CVE-2022-44268
2023-02-06 00:00:00
hackerone
hackerone
HackerOne: [CVE-2022-44268] Arbitrary Remote Leak via ImageMagick
2023-02-02 06:00:01
ubuntucve
ubuntucve
CVE-2022-44268
2023-02-06 00:00:00
CVE-2022-44267
2023-02-06 00:00:00
exploitdb
exploitdb
ImageMagick 7.1.0-49 - DoS
2023-04-05 00:00:00
ImageMagick 7.1.0-49 - Arbitrary File Read
2023-04-05 00:00:00
gentoo
gentoo
ImageMagick: Multiple Vulnerabilities
2024-05-04 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.1%
Related for OPENVAS:1361412562310833637