{"schemaVersion":3,"id":"SUSE-SU-2023:4634-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for ImageMagick\n\nThis update for ImageMagick fixes the following issues:\n\nSecurity issues:\n\n- CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)\n- CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578)\n- CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624).\n- CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791).\n- CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)\n- CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).\n- CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982).\n- CVE-2022-32547: Fixed a load of misaligned address at MagickCore/property.c. (bsc#1200387)\n- CVE-2022-32546: Fixed an outside the range of representable values of type. (bsc#1200389)\n- CVE-2022-32545: Fixed an outside the range of representable values of type. (bsc#1200388)\n- CVE-2022-28463: Fixed buffer overflow in coders/cin.c (bsc#1199350).\n- CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file (bsc#1202250).\n- CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563).\n- CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212).\n- CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628)\n- CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627)\n- CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626)\n- CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624)\n- CVE-2021-20246: Division by zero in ScaleResampleFilter in MagickCore/resample.c (bsc#1182337).\n- CVE-2021-20244: Division by zero in ImplodeImage in MagickCore/visual-effects.c (bsc#1182325).\n- CVE-2021-20243: Division by zero in GetResizeFilterWeight in MagickCore/resize.c (bsc#1182336).\n- CVE-2021-20241: Division by zero in WriteJP2Image() in coders/jp2.c (bsc#1182335).\n- CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file (bsc#1202800).\n- CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero (bsc#1181836).\n- CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/ps.c. (bsc#1153866)\n\nBugfixes:\n\n- Use png_get_eXIf_1 when available (bsc#1197147).","dates":{"published":"2023-12-01T16:57:31.000Z","modified":"2026-02-04T02:42:32.321Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 7.0.7.34-150000.3.123.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.7.34-150000.3.123.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 7.0.7.34-150000.3.123.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.7.34-150000.3.123.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 7.0.7.34-150000.3.123.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.7.34-150000.3.123.1","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234634-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20234634-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1153866","label":"bugzilla.suse.com/1153866","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1181836","label":"bugzilla.suse.com/1181836","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182325","label":"bugzilla.suse.com/1182325","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182335","label":"bugzilla.suse.com/1182335","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182336","label":"bugzilla.suse.com/1182336","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182337","label":"bugzilla.suse.com/1182337","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184624","label":"bugzilla.suse.com/1184624","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184626","label":"bugzilla.suse.com/1184626","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184627","label":"bugzilla.suse.com/1184627","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184628","label":"bugzilla.suse.com/1184628","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195563","label":"bugzilla.suse.com/1195563","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1197147","label":"bugzilla.suse.com/1197147","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199350","label":"bugzilla.suse.com/1199350","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1200387","label":"bugzilla.suse.com/1200387","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1200388","label":"bugzilla.suse.com/1200388","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1200389","label":"bugzilla.suse.com/1200389","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1202250","label":"bugzilla.suse.com/1202250","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1202800","label":"bugzilla.suse.com/1202800","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1207982","label":"bugzilla.suse.com/1207982","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1207983","label":"bugzilla.suse.com/1207983","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209141","label":"bugzilla.suse.com/1209141","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211791","label":"bugzilla.suse.com/1211791","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1213624","label":"bugzilla.suse.com/1213624","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1214578","label":"bugzilla.suse.com/1214578","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1215939","label":"bugzilla.suse.com/1215939","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17540","label":"www.suse.com/security/cve/CVE-2019-17540","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-21679","label":"www.suse.com/security/cve/CVE-2020-21679","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20176","label":"www.suse.com/security/cve/CVE-2021-20176","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20224","label":"www.suse.com/security/cve/CVE-2021-20224","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20241","label":"www.suse.com/security/cve/CVE-2021-20241","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20243","label":"www.suse.com/security/cve/CVE-2021-20243","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20244","label":"www.suse.com/security/cve/CVE-2021-20244","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20246","label":"www.suse.com/security/cve/CVE-2021-20246","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20309","label":"www.suse.com/security/cve/CVE-2021-20309","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20311","label":"www.suse.com/security/cve/CVE-2021-20311","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20312","label":"www.suse.com/security/cve/CVE-2021-20312","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20313","label":"www.suse.com/security/cve/CVE-2021-20313","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0284","label":"www.suse.com/security/cve/CVE-2022-0284","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2719","label":"www.suse.com/security/cve/CVE-2022-2719","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28463","label":"www.suse.com/security/cve/CVE-2022-28463","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32545","label":"www.suse.com/security/cve/CVE-2022-32545","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32546","label":"www.suse.com/security/cve/CVE-2022-32546","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32547","label":"www.suse.com/security/cve/CVE-2022-32547","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44267","label":"www.suse.com/security/cve/CVE-2022-44267","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44268","label":"www.suse.com/security/cve/CVE-2022-44268","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1289","label":"www.suse.com/security/cve/CVE-2023-1289","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34151","label":"www.suse.com/security/cve/CVE-2023-34151","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3745","label":"www.suse.com/security/cve/CVE-2023-3745","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5341","label":"www.suse.com/security/cve/CVE-2023-5341","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-17540","CVE-2020-21679","CVE-2021-20176","CVE-2021-20224","CVE-2021-20241","CVE-2021-20243","CVE-2021-20244","CVE-2021-20246","CVE-2021-20309","CVE-2021-20311","CVE-2021-20312","CVE-2021-20313","CVE-2022-0284","CVE-2022-2719","CVE-2022-28463","CVE-2022-32545","CVE-2022-32546","CVE-2022-32547","CVE-2022-44267","CVE-2022-44268","CVE-2023-1289","CVE-2023-34151","CVE-2023-3745","CVE-2023-5341"],"downstream":[],"duplicates":[],"related":["CVE-2019-17540","CVE-2020-21679","CVE-2021-20176","CVE-2021-20224","CVE-2021-20241","CVE-2021-20243","CVE-2021-20244","CVE-2021-20246","CVE-2021-20309","CVE-2021-20311","CVE-2021-20312","CVE-2021-20313","CVE-2022-0284","CVE-2022-2719","CVE-2022-28463","CVE-2022-32545","CVE-2022-32546","CVE-2022-32547","CVE-2022-44267","CVE-2022-44268","CVE-2023-1289","CVE-2023-34151","CVE-2023-3745","CVE-2023-5341"]},"timeline":[{"kind":"published","date":"2023-12-01T16:57:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:42:32.321Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T13:53:33.489Z","stale":false,"partial":false}}