The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: Insufficient shell characters filtering (CVE-2016-3714)

  - ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c (CVE-2018-16328)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 5 : imagemagick (Unpatched Vulnerability)

critical Nessus Plugin ID 199277

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Sep 10, 2024, 4:59 PM CISA reference Plugin Feed: 202409101659
Version 1.3 Sep 9, 2024, 10:05 PM CISA reference Plugin Feed: 202409092205
Version 1.2 Jun 4, 2024, 8:32 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202406040832
Version 1.1 Jun 4, 2024, 3:18 AM New Plugin Feed: 202406040318