ImageMagickが不正な形式の特定の画像ファイルを不適切に処理することがわかりました。ImageMagickを使用するユーザーまたは自動化されたシステムが誘導されて特別に細工された画像を開くと、攻撃者がこれを悪用して、サービス拒否を引き起こしたり、プログラムを呼び出すユーザーの権限でコードを実行したりする可能性があります。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

この更新では、imagemagickの複数の脆弱性を修正しています：無効な形式のイメージファイルが処理される場合、さまざまなメモリ処理の問題があり、入力サニタイズが欠如しているか不完全であるならば、サービス拒否、メモリリーク、任意のコード実行が引き起こされる可能性があります。

據發現，ImageMagick 未正確處理某些格式錯誤的影像檔案。如果使用 ImageMagick 的使用者或自動化系統受到誘騙而開啟特製的影像，則攻擊者可利用此弱點來引發拒絕服務，或可能以程式叫用使用者的權限執行程式碼。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

此更新可修正 imagemagick 中的數個弱點：如果處理格式錯誤的影像檔案，記憶體處理問題和缺少或不完整的輸入清理可能會導致拒絕服務、記憶體暴露或執行任意程式碼。

发现 ImageMagick 未能正确处理某些畸形图像文件。如果使用 ImageMagick 的用户或自动化系统受到诱骗打开特制的图像，则攻击者可利用此缺陷造成拒绝服务，或可能以调用该程序的用户权限执行代码。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

此更新可修复 imagemagick 中的数个漏洞：如果处理格式错误的图像文件，各种内存处理问题和输入清理缺少或不完整的情况可能会导致拒绝服务、内存泄露或执行任意代码。

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed.

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ImageMagick is an image display and manipulation tool     for the X Window System. ImageMagick can read and write     JPEG, TIFF, PNM, GIF,and Photo CD image formats. It can     resize, rotate, sharpen, color reduce, or add special     effects to an image, and when finished you can either     save the completed work in the original format or a     different one. ImageMagick also includes command line     programs for creating animated or transparent .gifs,     creating composite images, creating thumbnail images,     and more.ImageMagick is one of your choices if you need     a program to manipulate and display images. If you want     to develop your own applications which use ImageMagick     code or APIs, you need to install ImageMagick-devel as     well.Security Fix(es):In ImageMagick before 7.0.8-8, a     NULL pointer dereference exists in the     GetMagickProperty function in     MagickCore/property.c.(CVE-2018-16329)ImageMagick     before 6.9.9-24 and 7.x before 7.0.7-12 has a     use-after-free in Magick::Image::read in     Magick++/lib/Image.cpp.(CVE-2017-17499)In ImageMagick     before 6.9.8-5 and 7.x before 7.0.5-6, there is a     memory leak in the ReadMATImage function in     coders/mat.c.(CVE-2017-13146)In ImageMagick before     6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage     function in coders/mat.c uses uninitialized data, which     might allow remote attackers to obtain sensitive     information from process memory.(CVE-2017-13143)In     ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the     ReadOneMNGImage function in coders/png.c has an     out-of-bounds read with the MNG CLIP     chunk.(CVE-2017-13139)coders/psd.c in ImageMagick     allows remote attackers to have unspecified impact via     a crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5510)coders/psd.c in ImageMagick allows     remote attackers to have unspecified impact via a     crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5509)Memory leak in coders/mpc.c in     ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4     allows remote attackers to cause a denial of service     (memory consumption) via vectors involving a pixel     cache.(CVE-2017-5507)Memory leak in the IsOptionMember     function in MagickCore/option.c in ImageMagick before     6.9.2-2, as used in ODR-PadEnc and other products,     allows attackers to trigger memory     consumption.(CVE-2016-10252)Off-by-one error in     coders/wpg.c in ImageMagick allows remote attackers to     have unspecified impact via vectors related to a string     copy.(CVE-2016-10145)Memory leak in     AcquireVirtualMemory in ImageMagick before 7 allows     remote attackers to cause a denial of service (memory     consumption) via unspecified vectors.(CVE-2016-7539)In     coders/bmp.c in ImageMagick before 7.0.8-16, an input     file can result in an infinite loop and hang, with high     CPU and memory consumption. Remote attackers could     leverage this vulnerability to cause a denial of     service via a crafted file.(CVE-2018-20467)In     ImageMagick before 7.0.8-8, a NULL pointer dereference     exists in the CheckEventLogging function in     MagickCore/log.c.(CVE-2018-16328)ReadXBMImage in     coders/xbm.c in ImageMagick before 7.0.8-9 leaves data     uninitialized when processing an XBM file that has a     negative pixel value. If the affected code is used as a     library loaded into a process that includes sensitive     information, that information sometimes can be leaked     via the image data.(CVE-2018-16323)WriteEPTImage in     coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote     attackers to cause a denial of service     (MagickCore/memory.c double free and application crash)     or possibly have unspecified other impact via a crafted     file.(CVE-2018-8804)In ImageMagick 7.0.8-3 Q16,     ReadDIBImage and WriteDIBImage in coders/dib.c allow     attackers to cause an out of bounds write via a crafted     file.(CVE-2018-12600)ImageMagick version 7.0.7-2     contains a memory leak in ReadYUVImage in     coders/yuv.c.(CVE-2017-15033)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

  - Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier     allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a     large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than     CVE-2014-2030. (CVE-2014-1947)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: Insufficient shell characters filtering (CVE-2016-3714)

  - ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c (CVE-2018-16328)

  - The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper     variable type for the allocation size, which might allow remote attackers to cause a denial of service     (crash) via a crafted PNG file that triggers incorrect memory allocation. (CVE-2012-3437)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ImageMagick: NULL pointer dereference in  GetMagickProperty function in MagickCore/property.c     (CVE-2018-16329)

  - The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a     denial of service (out-of-bounds read) via a crafted image file. (CVE-2014-8354)

  - PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-     of-bounds read). (CVE-2014-8355)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名稱	產品	系列	已發布	已更新	嚴重性
110516	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ImageMagick の脆弱性 (USN-3681-1)	Nessus	Ubuntu Local Security Checks	2018/6/13	2023/10/21	critical
105489	DebianDSA-4074-1：imagemagick - セキュリティ更新	Nessus	Debian Local Security Checks	2017/12/29	2021/1/4	critical
110516	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS：ImageMagick 弱點 (USN-3681-1)	Nessus	Ubuntu Local Security Checks	2018/6/13	2023/10/21	critical
105489	Debian DSA-4074-1：imagemagick - 安全性更新	Nessus	Debian Local Security Checks	2017/12/29	2021/1/4	critical
110516	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS：ImageMagick 漏洞 (USN-3681-1)	Nessus	Ubuntu Local Security Checks	2018/6/13	2023/10/21	critical
105489	Debian DSA-4074-1：imagemagick - 安全更新	Nessus	Debian Local Security Checks	2017/12/29	2021/1/4	critical
105489	Debian DSA-4074-1 : imagemagick - security update	Nessus	Debian Local Security Checks	2017/12/29	2021/1/4	critical
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	2020/4/15	2021/2/9	critical
110516	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-3681-1)	Nessus	Ubuntu Local Security Checks	2018/6/13	2023/10/21	critical
130869	EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-2160)	Nessus	Huawei Local Security Checks	2019/11/12	2021/2/9	critical
199269	RHEL 6 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
199277	RHEL 5 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
199283	RHEL 7 : imagemagick (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/14	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	2019/12/10	2021/2/9	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical