リモートホストは、GLSA-201711-07（ImageMagick：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がImageMagickで発見されています。詳細については、記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、ユーザーを誘導して特別に細工されたファイルを処理させることで、機密情報を取得したり、サービス拒否状態を引き起こしたり、他の不特定の影響を与えたりする可能性があります。回避策：現時点では、既知の回避策はありません。

遠端主機受到 GLSA-201711-07 中所述的弱點影響 (ImageMagick：多個弱點) 在 ImageMagick 中發現多個弱點。如需詳細資料，請檢閱提及的 CVE 識別碼。影響：遠端攻擊者可引誘使用者處理特製檔案，進而可取得敏感資訊、造成拒絕服務情形或其他不明影響。因應措施：目前尚無已知的因應措施。

远程主机受到 GLSA-201711-07 中所述漏洞的影响（ImageMagick：多个漏洞）在 ImageMagick 中发现多个漏洞。如需详细信息，请查看供参考的 CVE 标识符。影响：远程攻击者可引诱用户处理特制文件，进而可取得敏感信息、造成拒绝服务情况或其他不明影响。解决方法：目前无任何已知的解决方法。

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a     denial of service (out-of-bounds read) via a crafted image file. (CVE-2014-8354)

  - PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-     of-bounds read). (CVE-2014-8355)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201711-07 (ImageMagick: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ImageMagick. Please       review the referenced CVE identifiers for details.
  Impact :

    Remote attackers, by enticing a user to process a specially crafted       file, could obtain sensitive information, cause a Denial of Service       condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

  - Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier     allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a     large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than     CVE-2014-2030. (CVE-2014-1947)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名稱	產品	系列	已發布	已更新	嚴重性
104515	GLSA-201711-07：ImageMagick：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
104515	GLSA-201711-07：ImageMagick：多個弱點	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
104515	GLSA-201711-07：ImageMagick：多个漏洞	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
199283	RHEL 7 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/14	critical
104515	GLSA-201711-07 : ImageMagick: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/11/13	2021/1/11	critical
199269	RHEL 6 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical