遠端主機上安裝的 ImageMagick 版本是 6.9.10.68-3.23 之前的版本。因此受到 ALAS-2021-1479 公告中所提及的一個弱點影響。

  - ImageMagick 6.9.11-40 版和 7.x 的 7.0.10-40 之前版本會不當處理 -authenticate 選項，允許為受密碼保護的 PDF 檔設定密碼。未正確逸出/清理使用者控制的密碼，因此可透過 coders/pdf.c 插入其他 shell 命令。
    (CVE-2020-29599)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機上安裝的 ImageMagick 版本是 6.9.10.68-5 之前的版本。因此受到 ALAS2-2021-1596 公告中所提及的一個弱點影響。

  - ImageMagick 6.9.11-40 版和 7.x 的 7.0.10-40 之前版本會不當處理 -authenticate 選項，允許為受密碼保護的 PDF 檔設定密碼。未正確逸出/清理使用者控制的密碼，因此可透過 coders/pdf.c 插入其他 shell 命令。
    (CVE-2020-29599)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

執行 CORE 5.05 / MAIN 5.05 版的遠端 NewStart CGSL 主機上安裝的 ImageMagick 套件受到一個弱點影響：

  - ImageMagick 6.9.11-40 版和 7.x 的 7.0.10-40 之前版本會不當處理 -authenticate 選項，允許為受密碼保護的 PDF 檔設定密碼。未正確逸出/清理使用者控制的密碼，因此可透過 coders/pdf.c 插入其他 shell 命令。
    (CVE-2020-29599)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0024 advisory.

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows     setting a password for password-protected PDF files. The user-controlled password was not properly     escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
    (CVE-2020-29599)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ImageMagick packages installed that are affected by a vulnerability:

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows     setting a password for password-protected PDF files. The user-controlled password was not properly     escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
    (CVE-2020-29599)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Windows host has a version of ImageMagick installed that is prior to 6.9.11-40 or 7.x prior to 7.0.10-4.
It is, therefore, affected by a command injection vulnerability via the -authenticate option.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote     attackers to cause a denial of service (use-after-free     and application crash) or possibly have unspecified     other impact by crafting a Matlab image file that is     mishandled in ReadImage in     MagickCore/constitute.c.(CVE-2019-15140)

  - In ImageMagick 7.x before 7.0.8-41 and 6.x before     6.9.10-41, there is a divide-by-zero vulnerability in     the MeanShiftImage function. It allows an attacker to     cause a denial of service by sending a crafted     file.(CVE-2019-14981)

  - ImageMagick 7.0.8-35 has a memory leak in     magick/xwindow.c, related to     XCreateImage.(CVE-2019-16708)

  - ImageMagick 7.0.8-35 has a memory leak in coders/dps.c,     as demonstrated by XCreateImage.(CVE-2019-16709)

  - ImageMagick 7.0.8-35 has a memory leak in coders/dot.c,     as demonstrated by AcquireMagickMemory in     MagickCore/memory.c.(CVE-2019-16710)

  - ImageMagick 7.0.8-40 has a memory leak in     Huffman2DEncodeImage in coders/ps2.c.(CVE-2019-16711)

  - In ImageMagick 7.0.8-43 Q16, there is a heap-based     buffer overflow in the function WriteSGIImage of     coders/sgi.c.(CVE-2019-19948)

  - In ImageMagick 7.0.8-43 Q16, there is a heap-based     buffer over-read in the function WritePNGImage of     coders/png.c, related to Magick_png_write_raw_profile     and LocaleNCompare.(CVE-2019-19949)

  - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based     buffer over-read in BlobToStringInfo in     MagickCore/string.c during TIFF image     decoding.(CVE-2020-13902)

  - In ImageMagick 7.0.5-7 Q16, an assertion failure was     found in the function LockSemaphoreInfo, which allows     attackers to cause a denial of service via a crafted     file.(CVE-2017-9501)

  - When ImageMagick 7.0.6-1 processes a crafted file in     convert, it can lead to a heap-based buffer over-read     in the WriteUILImage() function in     coders/uil.c.(CVE-2017-11533)

  - Null Pointer Dereference in the IdentifyImage function     in MagickCore/identify.c in ImageMagick through     7.0.6-10 allows an attacker to perform denial of     service by sending a crafted image     file.(CVE-2017-13768)

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40     mishandles the -authenticate option, which allows     setting a password for password-protected PDF files.
    The user-controlled password was not properly     escaped/sanitized and it was therefore possible to     inject additional shell commands via     coders/pdf.c.(CVE-2020-29599)

  - A flaw was found in ImageMagick in     MagickCore/statistic.c. An attacker who submits a     crafted file that is processed by ImageMagick could     trigger undefined behavior in the form of values     outside the range of type `unsigned long`. This would     most likely lead to an impact to application     availability, but could potentially cause other     problems related to undefined behavior. This flaw     affects ImageMagick versions prior to     7.0.8-69.(CVE-2020-27766)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6200-1 advisory.

    It was discovered that ImageMagick incorrectly handled the -authenticate option for password-protected     PDF files. An attacker could possibly use this issue to inject additional shell commands and perform     arbitrary code execution. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-29599)

    It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user     or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker     could exploit this to cause a denial of service. This issue only affected Ubuntu 20.04 LTS.
    (CVE-2021-20224)

    Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values when processing image data.
    If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an     attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 20.04 LTS.
    (CVE-2021-20241, CVE-2021-20243)

    It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based     image files. By tricking a user into opening a specially crafted image file, an attacker could crash the     application causing a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-20244,     CVE-2021-20309)

    It was discovered that ImageMagick incorrectly handled certain values when performing resampling     operations. By tricking a user into opening a specially crafted image file, an attacker could crash the     application causing a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-20246)

    It was discovered that ImageMagick incorrectly handled certain values when processing thumbnail image     data. By tricking a user into opening a specially crafted image file, an attacker could crash the     application causing a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-20312)

    It was discovered that ImageMagick incorrectly handled memory cleanup when performing certain     cryptographic operations. Under certain conditions sensitive cryptographic information could be disclosed.
    This issue only affected Ubuntu 20.04 LTS. (CVE-2021-20313)

    It was discovered that ImageMagick did not use the correct rights when specifically excluded by a module     policy. An attacker could use this issue to read and write certain restricted files. This issue only     affected Ubuntu 20.04 LTS. (CVE-2021-39212)

    It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were     tricked into opening a specially crafted image file, an attacker could possibly exploit this issue to     cause a denial of service or other unspecified impact. This issue only affected Ubuntu 20.04 LTS.
    (CVE-2022-28463, CVE-2022-32545, CVE-2022-32546, CVE-2022-32547)

    It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were     tricked into opening a specially crafted image file, an attacker could possibly exploit this issue to     cause a denial of service or other unspecified impact. This issue only affected Ubuntu 22.04 LTS, Ubuntu     22.10, and Ubuntu 23.04. (CVE-2021-3610, CVE-2023-1906, CVE-2023-3428)

    It was discovered that ImageMagick incorrectly handled certain values when processing specially crafted     SVG files. By tricking a user into opening a specially crafted SVG file, an attacker could crash the     application causing a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,     Ubuntu 22.10, and Ubuntu 23.04. (CVE-2023-1289)

    It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were     tricked into opening a specially crafted tiff file, an attacker could possibly exploit this issue to cause     a denial of service or other unspecified impact. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10,     and Ubuntu 23.04. (CVE-2023-3195)

    It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were     tricked into opening a specially crafted image file, an attacker could possibly exploit this issue to     cause a denial of service or other unspecified impact. (CVE-2023-34151)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ImageMagick fixes the following issues :

  - CVE-2020-19667: Fixed a stack-based buffer overflow in     XPM coder could result in a crash (bsc#1179103).

  - CVE-2020-25664: Fixed a heap-based buffer overflow in     PopShortPixel (bsc#1179202).

  - CVE-2020-25665: Fixed a heap-based buffer overflow in     WritePALMImage (bsc#1179208).

  - CVE-2020-25666: Fixed an outside the range of     representable values of type 'int' and signed integer     overflow (bsc#1179212).

  - CVE-2020-25674: Fixed a heap-based buffer overflow in     WriteOnePNGImage (bsc#1179223).

  - CVE-2020-25675: Fixed an outside the range of     representable values of type 'long' and integer overflow     (bsc#1179240).

  - CVE-2020-25676: Fixed an outside the range of     representable values of type 'long' and integer overflow     at MagickCore/pixel.c (bsc#1179244).

  - CVE-2020-27750: Fixed a division by zero in     MagickCore/colorspace-private.h (bsc#1179260).

  - CVE-2020-27751: Fixed an integer overflow in     MagickCore/quantum-export.c (bsc#1179269).

  - CVE-2020-27752: Fixed a heap-based buffer overflow in     PopShortPixel in MagickCore/quantum-private.h     (bsc#1179346).

  - CVE-2020-27753: Fixed memory leaks in     AcquireMagickMemory function (bsc#1179397).

  - CVE-2020-27754: Fixed an outside the range of     representable values of type 'long' and signed integer     overflow at MagickCore/quantize.c (bsc#1179336).

  - CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory     function in ImageMagick/MagickCore/memory.c     (bsc#1179345).

  - CVE-2020-27756: Fixed a division by zero at     MagickCore/geometry.c (bsc#1179221).

  - CVE-2020-27757: Fixed an outside the range of     representable values of type 'unsigned long long' at     MagickCore/quantum-private.h (bsc#1179268).

  - CVE-2020-27758: Fixed an outside the range of     representable values of type 'unsigned long long'     (bsc#1179276).

  - CVE-2020-27759: Fixed an outside the range of     representable values of type 'int' at     MagickCore/quantize.c (bsc#1179313).

  - CVE-2020-27760: Fixed a division by zero at     MagickCore/enhance.c (bsc#1179281).

  - CVE-2020-27761: Fixed an outside the range of     representable values of type 'unsigned long' at     coders/palm.c (bsc#1179315).

  - CVE-2020-27762: Fixed an outside the range of     representable values of type 'unsigned char'     (bsc#1179278).

  - CVE-2020-27763: Fixed a division by zero at     MagickCore/resize.c (bsc#1179312).

  - CVE-2020-27764: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179317).

  - CVE-2020-27765: Fixed a division by zero at     MagickCore/segment.c (bsc#1179311).

  - CVE-2020-27766: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179361).

  - CVE-2020-27767: Fixed an outside the range of     representable values of type 'float' at     MagickCore/quantum.h (bsc#1179322).

  - CVE-2020-27768: Fixed an outside the range of     representable values of type 'unsigned int' at     MagickCore/quantum-private.h (bsc#1179339).

  - CVE-2020-27769: Fixed an outside the range of     representable values of type 'float' at     MagickCore/quantize.c (bsc#1179321).

  - CVE-2020-27770: Fixed an unsigned offset overflowed at     MagickCore/string.c (bsc#1179343).

  - CVE-2020-27771: Fixed an outside the range of     representable values of type 'unsigned char' at     coders/pdf.c (bsc#1179327).

  - CVE-2020-27772: Fixed an outside the range of     representable values of type 'unsigned int' at     coders/bmp.c (bsc#1179347).

  - CVE-2020-27773: Fixed a division by zero at     MagickCore/gem-private.h (bsc#1179285).

  - CVE-2020-27774: Fixed an integer overflow at     MagickCore/statistic.c (bsc#1179333).

  - CVE-2020-27775: Fixed an outside the range of     representable values of type 'unsigned char' at     MagickCore/quantum.h (bsc#1179338).

  - CVE-2020-27776: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179362).

  - CVE-2020-29599: Fixed a shell command injection in
    -authenticate (bsc#1179753).

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Published	Updated	Severity
146570	Amazon Linux AMI：ImageMagick (ALAS-2021-1479)	Nessus	Amazon Linux Local Security Checks	2/18/2021	12/11/2024	high
146629	Amazon Linux 2：ImageMagick (ALAS-2021-1596)	Nessus	Amazon Linux Local Security Checks	2/19/2021	12/11/2024	high
154537	NewStart CGSL CORE 5.05 / MAIN 5.05：ImageMagick 弱點 (NS-SA-2021-0186)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	11/27/2023	high
146883	CentOS 7 : ImageMagick (RHSA-2021:0024)	Nessus	CentOS Local Security Checks	2/27/2021	10/9/2024	high
154636	NewStart CGSL CORE 5.04 / MAIN 5.04 : ImageMagick Vulnerability (NS-SA-2021-0100)	Nessus	NewStart CGSL Local Security Checks	10/28/2021	11/27/2023	high
144454	ImageMagick < 6.9.11-40 / 7.x < 7.0.10-40 -authenticate Option Command Injection	Nessus	Windows	12/18/2020	6/4/2024	high
146668	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2021-1305)	Nessus	Huawei Local Security Checks	2/22/2021	1/19/2024	critical
177934	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : ImageMagick vulnerabilities (USN-6200-1)	Nessus	Ubuntu Local Security Checks	7/4/2023	9/3/2025	high
145394	openSUSE Security Update : ImageMagick (openSUSE-2021-148)	Nessus	SuSE Local Security Checks	1/25/2021	1/26/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

critical

high

high