DLA-3429-1 imagemagick - security update

Bulletin has no description...

CVE-2023-2157

A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing...

The vulnerability of the ReadSVGImage() function in the ImageMagick component coders/svg.c, which allows a hacker to cause a service failure.

The vulnerability of the ReadSVGImage function in the ImageMagick console graphics editor’s coders/svg.c component is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the ParseMetaGeometry() function in the MagickCore/geometry.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphics editor is related to an incorrect implementation of the division operation. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a...

PT-2023-3439 · Unknown +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: A security flaw in ImageMagick causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding. This issue is related to the lack...

The vulnerability in the MagickCore/statistic.c component of the console-based image editing tool ImageMagick allows a hacker to induce a service failure.

The vulnerability of the MagickCore/statistic.c component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

Fedora: Security Advisory for ImageMagick (FEDORA-2023-541c04817f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.86-1.fc37

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Medium: ImageMagick

Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...

Fedora 37 : ImageMagick (2023-541c04817f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-541c04817f advisory. Update ImageMagick to 6.9.12.86 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Mageia: Security Advisory (MGASA-2023-0161)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated imagemagick packages fix security vulnerability

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of...

MGASA-2023-0161 Updated imagemagick packages fix security vulnerability

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of...

Medium: ImageMagick

Issue Overview: Possible heap-based buffer overflow attack in ImportMultiSpectralQuantum in MagickCore/quantum-import.c for ImageMagick CVE-2023-1906 Affected Packages: ImageMagick Issue Correction: Run dnf update ImageMagick --releasever 2023.0.20230503 or dnf update --advisory ALAS2023-2023-170...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-170)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-170 advisory. Possible heap-based buffer overflow attack in ImportMultiSpectralQuantum in MagickCore/quantum-import.c for ImageMagick CVE-2023-1906 Tenable has extracted the preceding description block directly from...

USN-5855-3: ImageMagick regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: ...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:1927-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1927-1 advisory. - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. bsc1210308 Tenable has...

@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.2), @sonarsource/gatsby-theme-marketing (>=3.1.0, <=3.5.0) +1 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=5.0.0, <=5.6.0)

gatsby-plugin-sharp NPM version =5.0.0, =1.5.0-beta.0, =3.1.0, =5.0.0-alpha-drupal-proxyurl.14, =5.0.0-alpha-v5.d20221012t101120.57 Source cves: CVE-2023-30548 Source advisory: OSV:GHSA-H2PM-378C-PCXX...

SUSE-SU-2023:1927-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. bsc1210308...

Amazon Linux 2 : ImageMagick (ALAS-2023-2014)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2014 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation...