USN-7068-1: imagemagick Ubuntu

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

34 links

ubuntu.com/security/notices/USN-7068-1Advisory
ubuntu.com/security/CVE-2019-7397REPORT
ubuntu.com/security/CVE-2019-7398REPORT
ubuntu.com/security/CVE-2019-9956REPORT
ubuntu.com/security/CVE-2020-19667REPORT
ubuntu.com/security/CVE-2020-25664REPORT
ubuntu.com/security/CVE-2020-25665REPORT
ubuntu.com/security/CVE-2020-25666REPORT
ubuntu.com/security/CVE-2020-25674REPORT
ubuntu.com/security/CVE-2020-25676REPORT

Show all 34 references

ubuntu.com/security/CVE-2020-27560REPORT
ubuntu.com/security/CVE-2020-27750REPORT
ubuntu.com/security/CVE-2020-27753REPORT
ubuntu.com/security/CVE-2020-27754REPORT
ubuntu.com/security/CVE-2020-27755REPORT
ubuntu.com/security/CVE-2020-27758REPORT
ubuntu.com/security/CVE-2020-27759REPORT
ubuntu.com/security/CVE-2020-27760REPORT
ubuntu.com/security/CVE-2020-27761REPORT
ubuntu.com/security/CVE-2020-27762REPORT
ubuntu.com/security/CVE-2020-27763REPORT
ubuntu.com/security/CVE-2020-27764REPORT
ubuntu.com/security/CVE-2020-27765REPORT
ubuntu.com/security/CVE-2020-27766REPORT
ubuntu.com/security/CVE-2020-27767REPORT
ubuntu.com/security/CVE-2020-27768REPORT
ubuntu.com/security/CVE-2020-27769REPORT
ubuntu.com/security/CVE-2020-27770REPORT
ubuntu.com/security/CVE-2020-27771REPORT
ubuntu.com/security/CVE-2020-27772REPORT
ubuntu.com/security/CVE-2020-27773REPORT
ubuntu.com/security/CVE-2020-27774REPORT
ubuntu.com/security/CVE-2020-27775REPORT
ubuntu.com/security/CVE-2020-27776REPORT

Related vulnerabilities

USN-3131-1ubuntuimagemagick9y ago21-11-2016 14:07imagemagick vulnerabilities It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.USN-2990-1ubuntuimagemagick10y ago02-06-2016 13:13imagemagick vulnerabilities Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly sanitized untrusted input. A remote attacker could use these issues to execute arbitrary code. These issues are known as "ImageTragick". This update disables problematic coders via the /etc/ImageMagick-6/policy.xml configuration file. In certain environments the coders may need to be manually re-enabled after making sure that ImageMagick does not process untrusted input. (CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718) Bob Friesenhahn discovered that ImageMagick allowed injecting commands via an image file or filename. A remote attacker could use this issue to execute arbitrary code. (CVE-2016-5118)UBUNTU-CVE-2024-41817ubuntuimagemagick2y ago29-07-2024 16:15ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executing, which might lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory while executing `ImageMagick`. The vulnerability is fixed in 7.11-36.CVE-2021-40211debianimagemagick+90.95%3y ago22-08-2023 00:00An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.CVE-2021-3610debianimagemagick+42.76%4y ago24-02-2022 00:00A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault.CVE-2015-8896debianimagemagick+92.90%9y ago15-03-2017 19:00Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.

USN-7068-1: imagemagick Ubuntu

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References