The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-233:02 advisory.

    ImageMagick is an image display and manipulation tool for the X     Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,     and Photo CD image formats. It can resize, rotate, sharpen, color     reduce, or add special effects to an image, and when finished you can     either save the completed work in the original format or a different     one. ImageMagick also includes command line programs for creating     animated or transparent .gifs, creating composite images, creating     thumbnail images, and more.
    ImageMagick is one of your choices if you need a program to manipulate     and display images. If you want to develop your own applications     which use ImageMagick code or APIs, you need to install     ImageMagick-devel as well.
    Security issues fixed with this release:
    CVE-2016-3714     The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW,     (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x     before 7.0.1-1 allow remote attackers to execute arbitrary code via     shell metacharacters in a crafted image, aka ImageTragick.
    CVE-2016-3715     The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before     7.0.1-1 allows remote attackers to delete arbitrary files via a     crafted image.
    CVE-2016-3716     The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1     allows remote attackers to move arbitrary files via a crafted image.
    CVE-2016-3717     The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1     allows remote attackers to read arbitrary files via a crafted image.
    CVE-2016-3718     The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x     before 7.0.1-1 allow remote attackers to conduct server-side request     forgery (SSRF) attacks via a crafted image.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 7 : ImageMagick-6.7.8.9-13.el7 (AXSA:2016-233:02)

high Nessus Plugin ID 289248

Version 1.2

Version 1.1

Version 1.2 Jan 18, 2026, 1:30 AM CISA reference Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202601180130
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212