Lucene search
PRIOn knowledge basePRION:CVE-2023-34475HistoryJun 16, 2023 - 8:15 p.m.
Heap overflow
2023-06-1620:15:00
PRIOn knowledge base
www.prio-n.com
5
imagemagick
replacexmpvalue
heap overflow
denial of service
vulnerability
A heap use after free issue was discovered in ImageMagick’s ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| extra_packages_for_enterprise_linux | eq | 8.0 | |
| fedora | eq | 37 | |
| fedora | eq | 38 | |
| imagemagick | eq | < 7.1.1-10 |
References
access.redhat.com/security/cve/CVE-2023-34475
bugzilla.redhat.com/show_bug.cgi?id=2214149
github.com/ImageMagick/ImageMagick/commit/1061db7f80fdc9ef572ac60b55f408f7bab6e1b0
lists.fedoraproject.org/archives/list/[email protected]/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/
lists.fedoraproject.org/archives/list/[email protected]/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
Related
osv
osv
CVE-2023-34475
2023-06-16 20:15:09
nvd
nvd
CVE-2023-34475
2023-06-16 20:15:09
debiancve
debiancve
CVE-2023-34475
2023-06-16 20:15:09
redhatcve
redhatcve
CVE-2023-34475
2023-06-12 06:05:53
alpinelinux
alpinelinux
CVE-2023-34475
2023-06-16 20:15:09
ubuntucve
ubuntucve
CVE-2023-34475
2023-06-16 00:00:00
cve
cve
CVE-2023-34475
2023-06-16 20:15:09
cvelist
cvelist
CVE-2023-34475
2023-06-16 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.15-1.fc38
2023-08-24 01:32:21
[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.93-1.fc37
2023-08-31 01:20:29
nessus
nessus
Fedora 38 : ImageMagick (2023-27548af422)
2023-08-24 00:00:00
Fedora 37 : ImageMagick (2023-edbdccae2a)
2023-08-31 00:00:00
openvas
openvas
Fedora: Security Advisory for ImageMagick (FEDORA-2023-27548af422)
2023-08-25 00:00:00
Fedora: Security Advisory for ImageMagick (FEDORA-2023-edbdccae2a)
2023-09-01 00:00:00