CVE-2016-3716: canonical ubuntu_linux
CVSS: 4.3v2.0MediumModified
AliasesUBUNTU-CVE-2016-3716DEBIAN-CVE-2016-3716
Published 05-05-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-3716 is a medium (CVSS 4.3) vulnerability in canonical ubuntu_linux. EPSS estimates a 11.34% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities. 2 public exploits are recorded.
CVSS score
4.3/10
010
Medium · v2.0 (NVD)EPSS score
11.34%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference, exploit-database
Advisory lineage
Upstream 0 · Downstream 10 · Related 4Timeline
- 05-05-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
CVSS metrics
4 scores · 3 sources · 2 versionsLow 3.3Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated3.3LowCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- OSV · DebianEcosystem advisory · calculated3.3LowCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
11.34%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 11.34% on 18-09-2026
18-09-202618-10-2026
EPSS score11.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (openwall.com)
Maturity: unknown
ImageMagick 7.0.1-0 / 6.9.3-9 - 'ImageTragick ' Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat8 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_hpc_node6.0 | 7.0
- enterprise_linux_hpc_node_eus7.2
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus7.2
Debian2 products
- graphicsmagick< 1.3.24-1
- imagemagick< 8:6.9.6.2+dfsg-2
Ubuntu2 products
- graphicsmagick< 1.3.18-1ubuntu3.1 | < 1.3.23-1ubuntu0.1
- imagemagick< 8:6.7.7.10-6ubuntu3.1 | < 8:6.8.9.9-7ubuntu5.1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04
Imagemagick1 product
- imagemagick≤ 6.9.3-9 | 7.0.0-0 | 7.0.1-0
5 vendors · 14 products
References
22 links- git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLogX Refsource CONFIRMPatchVendor Advisory
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRM
Show all 22 references
- www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlX Refsource CONFIRM
- www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568Vendor AdvisoryX Refsource SLACKWARE