CVE-2016-5118: canonical ubuntu_linux
CVSS: 10.0v2.0HighModified
AliasesALPINE-CVE-2016-5118SUSE-SU-2016:1570-1SUSE-SU-2016:1610-1UBUNTU-CVE-2016-5118DEBIAN-CVE-2016-5118DLA-500-1DLA-502-1DSA-3591-1CGA-76f8-297v-w3xmCGA-8p7c-xfp2-cxpq
Published 10-06-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-5118 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 49.98% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
49.98%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 8 · Related 6Timeline
- 10-06-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
CVSS metrics
7 scores · 5 sources · 3 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Critical 9.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
49.98%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 49.98% on 18-09-2026
18-09-202618-10-2026
EPSS score49.98%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse25 products
- ImageMagick&distro=SUSE Linux Enterprise Desktop 12< 6.8.8.1-25.1
- ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP1< 6.8.8.1-25.1
- ImageMagick&distro=SUSE Linux Enterprise Server 11 SP2-LTSS< 6.4.3.6-7.40.1
- ImageMagick&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 6.4.3.6-7.40.1
- ImageMagick&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 6.4.3.6-7.40.1
Debian3 products
- graphicsmagick< 1.3.24-1 | < 1.3.16-1.1+deb7u2
- imagemagick< 8:6.8.9.9-7.1 | < 8:6.7.7.10-5+deb7u6 | < 8:6.8.9.9-5+deb8u3
- debian_linuxEOL8.0
Ubuntu2 products
- graphicsmagick< 1.3.18-1ubuntu3.1 | < 1.3.23-1ubuntu0.1
- imagemagick< 8:6.7.7.10-6ubuntu3.1 | < 8:6.8.9.9-7ubuntu5.1
Alpine1 product
- imagemagick< 6.9.6.8-r0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04
Chainguard1 product
- imagemagick-6All versions (No fix recorded)
Graphicsmagick1 product
- graphicsmagick≤ 1.3.23
Imagemagick1 product
- imagemagick< 7.0.1-7
10 vendors · 39 products
References
33 links- access.redhat.com/errata/RHSA-2016:1237Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- www.securitytracker.com/id/1035985VDB EntryX Refsource SECTRACKBroken LinkThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryAdvisory
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRMThird Party AdvisoryAdvisory
- www.openwall.com/lists/oss-security/2016/05/30/1Mailing ListX Refsource MLISTThird Party AdvisoryAdvisory
Show all 33 references
- www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397749Vendor AdvisoryX Refsource SLACKWAREThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryAdvisory
- www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlX Refsource CONFIRMThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryAdvisory
- git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8X Refsource CONFIRMBroken LinkVendor AdvisoryAdvisory
- hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLogX Refsource CONFIRMRelease NotesVendor AdvisoryAdvisory
- bugzilla.suse.com/867943REPORT
- bugzilla.suse.com/982178REPORT