Medium: ImageMagick

Issue Overview: A vulnerability was found in ImageMagick where heap use-after-free was found in coders/bmp.c. CVE-2023-5341 Affected Packages: ImageMagick Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

ImageMagick Installed (macOS)

Binary data imagemagickmacosinstalled.nbin...

ROS-20231016-07

A vulnerability in the tiff.c file of the ImageMagick console graphics editor is related to a buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker acting remotely to force a user to open a specially crafted file, resulting in application crash and denial of servi...

ROS-20231016-03

A vulnerability in the tiff.c file of the ImageMagick console graphics editor is related to a buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker acting remotely to force a user to open a specially crafted file, resulting in application crash and denial of servi...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : GEGL vulnerability (USN-5251-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5251-1 advisory. It was discovered that GEGL incorrectly filtered and escaped file path input data when using the C system function for execution of the...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:4050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4050-1 advisory. - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 Tenable has extracted the...

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:4049-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4049-1 advisory. - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 Tenable has extracted the preceding descriptio...

The vulnerability of the console-based graphic editor ImageMagick lies in its reliance on memory after it is freed, allowing a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the use of memory after it is freed during the processing of BMP files. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE: Security Advisory (SUSE-SU-2023:4049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4050-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939...

SUSE-SU-2023:4049-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939...

openSUSE 15: libMagick++-7_Q16HDRI4 / libMagick++-7_Q16HDRI4-32bit / etc (SUSE-SU-2023:4008-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4008-1 advisory. - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 Tenable has extracted the preceding description block directly from the SUSE securit...

SUSE-SU-2023:4008-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939...

ImageMagick < 7.1.1-19 Use-After-Free DoS

The remote Windows host has a version of ImageMagick installed that is prior to 7.1.1-19. It is, therefore, affected by a use-after-free vulnerability that can lead to a denial of service. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Linux AMI : ImageMagick (ALAS-2023-1844)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1.29. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1844 advisory. A vulnerability was found in ImageMagick. This issue occurs as an undefined behavior, casting double to sizet in svg, mvg...

Important: Red Hat Security Advisory: ImageMagick security update

An update for ImageMagick is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

ImageMagick security update

6.9.10.68-7 - Added fix for CVE-2021-40211...

Amazon Linux 2 : ImageMagick (ALAS-2023-2272)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2272 advisory. A vulnerability was found in ImageMagick. This issue occurs as an undefined behavior, casting double to sizet in svg, mvg a...

Oracle Linux 7 : ImageMagick (ELSA-2023-5461)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5461 advisory. 6.9.10.68-7 - Added fix for CVE-2021-40211 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Medium: ImageMagick

Issue Overview: A vulnerability was found in ImageMagick. This issue occurs as an undefined behavior, casting double to sizet in svg, mvg and other coders. CVE-2023-34151 Affected Packages: ImageMagick Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section...