A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-edbdccae2a advisory.

    Update ImageMagick to 6.9.12.93



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-27548af422 advisory.

    Update ImageMagick to 7.1.1.15 (#2217558)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2878-1 advisory.

  - A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in     coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-     of-bounds read error, allowing an application to crash, resulting in a denial of service. (CVE-2023-34474)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
180328	Fedora 37 : ImageMagick (2023-edbdccae2a)	Nessus	Fedora Local Security Checks	critical
180105	Fedora 38 : ImageMagick (2023-27548af422)	Nessus	Fedora Local Security Checks	medium
178595	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ImageMagick (SUSE-SU-2023:2878-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2023-34474

medium

Tenable Plugins

critical

medium

medium