The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5628 advisory.

  - A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in     ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which     can lead to a crash and segmentation fault. (CVE-2021-3610)

  - A heap-buffer-overflow flaw was found in ImageMagick's PushShortPixel() function of quantum-private.h     file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to     ImageMagick for conversion, potentially leading to a denial of service. (CVE-2022-1115)

  - A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a     segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to     a segmentation fault, generating many trash files in /tmp, resulting in a denial of service. When     ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file     contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of     size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will     generate about 10G. (CVE-2023-1289)

  - A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function     in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an     out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
    (CVE-2023-1906)

  - A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting     double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). (CVE-2023-34151)

  - A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow     a local attacker to trick the user into opening a specially crafted file, resulting in an application     crash and denial of service. (CVE-2023-3428)

  - A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. (CVE-2023-5341)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5628 : imagemagick - security update

high Nessus Plugin ID 190896

Version 1.1

Version 1.0

Version 1.1 Jun 14, 2024, 2:32 PM IAVM reference Plugin Feed: 202406141432
Version 1.0 Feb 23, 2024, 12:07 AM New Plugin Feed: 202402230007