PT-2023-3403 · Unknown +2 · Imagemagick +2

🗓️ 17 May 2023 00:00:00Reported by Positive TechnologiesType

Security flaw in ImageMagick allows remote code execution in OpenBlob when pipes are enabled; no fix yet.

Reporter	Title	Published	Views	Family All 174
GithubExploit	Exploit for Improper Input Validation in Imagemagick	27 Sep 202303:37	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Imagemagick	23 May 202408:33	–	githubexploit
ATTACKERKB	CVE-2023-34153	30 May 202322:15	–	attackerkb
ATTACKERKB	CVE-2023-34151	30 May 202322:15	–	attackerkb
ATTACKERKB	CVE-2023-34152	30 May 202322:15	–	attackerkb
ATTACKERKB	CVE-2023-2157	6 Jun 202320:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-301)	24 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ImageMagick (ALAS-2023-2272)	5 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ImageMagick (ALAS-2023-1844)	6 Oct 202300:00	–	nessus
Tenable Nessus	Debian dla-3737 : imagemagick - security update	22 Feb 202400:00	–	nessus

Source	Link
github	www.github.com/ImageMagick/ImageMagick/issues/6339
github	www.github.com/overgrowncarrot1/ImageTragick_CVE-2023-34152
cve	www.cve.org/CVERecord
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34152
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2023-34152
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-34152
security-tracker	www.security-tracker.debian.org/tracker/source-package/imagemagick
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates

13 Jan 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 210

CVSS 3.19.8

EPSS0.64865

SSVC