ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3737 advisory.

  - A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a     segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to     a segmentation fault, generating many trash files in /tmp, resulting in a denial of service. When     ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file     contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of     size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will     generate about 10G. (CVE-2023-1289)

  - A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting     double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). (CVE-2023-34151)

  - ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in     Magick::Draw. (CVE-2023-39978)

  - A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. (CVE-2023-5341)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-320 advisory.

  - ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in     Magick::Draw. (CVE-2023-39978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-edbdccae2a advisory.

  - A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting     double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). (CVE-2023-34151)

  - A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability     in OpenBlob with --enable-pipes configured. (CVE-2023-34152)

  - A vulnerability was found in ImageMagick. This security flaw causes a shell command injection     vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding. (CVE-2023-34153)

  - A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker     to trick the user into opening a specially crafted malicious tiff file, causing an application to crash,     resulting in a denial of service. (CVE-2023-3195)

  - A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in     coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-     of-bounds read error, allowing an application to crash, resulting in a denial of service. (CVE-2023-34474)

  - A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in     MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering     an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service.
    (CVE-2023-34475)

  - A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow     a local attacker to trick the user into opening a specially crafted file, resulting in an application     crash and denial of service. (CVE-2023-3428)

  - ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in     Magick::Draw. (CVE-2023-39978)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
190895	Debian dla-3737 : imagemagick - security update	Nessus	Debian Local Security Checks	medium
181158	Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-320)	Nessus	Amazon Linux Local Security Checks	low
180328	Fedora 37 : ImageMagick (2023-edbdccae2a)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2023-39978

low

Tenable Plugins

medium

low

critical