CVE-2016-3717: canonical ubuntu_linux
CVSS: 7.1v2.0HighModified
AliasesUBUNTU-CVE-2016-3717DEBIAN-CVE-2016-3717
Published 05-05-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-3717 is a high (CVSS 7.1) vulnerability in canonical ubuntu_linux. EPSS estimates a 20.44% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.1/10
010
High · v2.0 (NVD)EPSS score
20.44%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 12 · Related 6Timeline
- 05-05-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
CVSS metrics
4 scores · 3 sources · 2 versionsMedium 5.5Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
High 7.1Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:C/I:N/A:NSourcesSingle source
EPSS trend
Probability
20.44%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 20.44% on 18-09-2026
18-09-202618-10-2026
EPSS score20.44%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundImageMagick 7.0.1-0 / 6.9.3-9 - 'ImageTragick ' Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat8 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_hpc_node6.0 | 7.0
- enterprise_linux_hpc_node_eus7.2
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus7.2
Debian2 products
- graphicsmagick< 1.3.24-1
- imagemagick< 8:6.9.6.2+dfsg-2
Ubuntu2 products
- graphicsmagick< 1.3.18-1ubuntu3.1 | < 1.3.23-1ubuntu0.1
- imagemagick< 8:6.7.7.10-6ubuntu3.1 | < 8:6.8.9.9-7ubuntu5.1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04
Imagemagick1 product
- imagemagick≤ 6.9.3-9 | 7.0.0-0 | 7.0.1-0
5 vendors · 14 products
References
23 links- git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLogX Refsource CONFIRMPatch
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRM
Show all 23 references
- www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlX Refsource CONFIRM
- www.openwall.com/lists/oss-security/2016/05/03/18Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
- www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568Vendor AdvisoryX Refsource SLACKWARE
- www.imagemagick.org/script/changelog.phpX Refsource CONFIRM