csaf_opensuse - opensuse-su-2024:10505-1

opensuse-su-2024:10505-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

GraphicsMagick-1.3.25-1.1 on GA media

Notes

Title of the patch

GraphicsMagick-1.3.25-1.1 on GA media

Description of the patch

These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10505

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "GraphicsMagick-1.3.25-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10505",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10505-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-1882 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-1882/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-3736 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-3736/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2012-3438 page",
        "url": "https://www.suse.com/security/cve/CVE-2012-3438/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2317 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2317/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3714 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3714/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3715 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3717 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3717/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3718 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5118 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5118/"
      }
    ],
    "title": "GraphicsMagick-1.3.25-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10505-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "GraphicsMagick-1.3.25-1.1.aarch64",
                "product": {
                  "name": "GraphicsMagick-1.3.25-1.1.aarch64",
                  "product_id": "GraphicsMagick-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "GraphicsMagick-devel-1.3.25-1.1.aarch64",
                "product": {
                  "name": "GraphicsMagick-devel-1.3.25-1.1.aarch64",
                  "product_id": "GraphicsMagick-devel-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
                "product": {
                  "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
                  "product_id": "libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
                "product": {
                  "name": "libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
                  "product_id": "libGraphicsMagick++-devel-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
                "product": {
                  "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
                  "product_id": "libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick3-config-1.3.25-1.1.aarch64",
                "product": {
                  "name": "libGraphicsMagick3-config-1.3.25-1.1.aarch64",
                  "product_id": "libGraphicsMagick3-config-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
                "product": {
                  "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
                  "product_id": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "perl-GraphicsMagick-1.3.25-1.1.aarch64",
                "product": {
                  "name": "perl-GraphicsMagick-1.3.25-1.1.aarch64",
                  "product_id": "perl-GraphicsMagick-1.3.25-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "GraphicsMagick-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "GraphicsMagick-1.3.25-1.1.ppc64le",
                  "product_id": "GraphicsMagick-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "GraphicsMagick-devel-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "GraphicsMagick-devel-1.3.25-1.1.ppc64le",
                  "product_id": "GraphicsMagick-devel-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
                  "product_id": "libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
                  "product_id": "libGraphicsMagick++-devel-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
                  "product_id": "libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
                  "product_id": "libGraphicsMagick3-config-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
                  "product_id": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "perl-GraphicsMagick-1.3.25-1.1.ppc64le",
                "product": {
                  "name": "perl-GraphicsMagick-1.3.25-1.1.ppc64le",
                  "product_id": "perl-GraphicsMagick-1.3.25-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "GraphicsMagick-1.3.25-1.1.s390x",
                "product": {
                  "name": "GraphicsMagick-1.3.25-1.1.s390x",
                  "product_id": "GraphicsMagick-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "GraphicsMagick-devel-1.3.25-1.1.s390x",
                "product": {
                  "name": "GraphicsMagick-devel-1.3.25-1.1.s390x",
                  "product_id": "GraphicsMagick-devel-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
                "product": {
                  "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
                  "product_id": "libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-devel-1.3.25-1.1.s390x",
                "product": {
                  "name": "libGraphicsMagick++-devel-1.3.25-1.1.s390x",
                  "product_id": "libGraphicsMagick++-devel-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
                "product": {
                  "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
                  "product_id": "libGraphicsMagick-Q16-3-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick3-config-1.3.25-1.1.s390x",
                "product": {
                  "name": "libGraphicsMagick3-config-1.3.25-1.1.s390x",
                  "product_id": "libGraphicsMagick3-config-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
                "product": {
                  "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
                  "product_id": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "perl-GraphicsMagick-1.3.25-1.1.s390x",
                "product": {
                  "name": "perl-GraphicsMagick-1.3.25-1.1.s390x",
                  "product_id": "perl-GraphicsMagick-1.3.25-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "GraphicsMagick-1.3.25-1.1.x86_64",
                "product": {
                  "name": "GraphicsMagick-1.3.25-1.1.x86_64",
                  "product_id": "GraphicsMagick-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "GraphicsMagick-devel-1.3.25-1.1.x86_64",
                "product": {
                  "name": "GraphicsMagick-devel-1.3.25-1.1.x86_64",
                  "product_id": "GraphicsMagick-devel-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
                  "product_id": "libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
                  "product_id": "libGraphicsMagick++-devel-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
                  "product_id": "libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick3-config-1.3.25-1.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick3-config-1.3.25-1.1.x86_64",
                  "product_id": "libGraphicsMagick3-config-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
                "product": {
                  "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
                  "product_id": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "perl-GraphicsMagick-1.3.25-1.1.x86_64",
                "product": {
                  "name": "perl-GraphicsMagick-1.3.25-1.1.x86_64",
                  "product_id": "perl-GraphicsMagick-1.3.25-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64"
        },
        "product_reference": "GraphicsMagick-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le"
        },
        "product_reference": "GraphicsMagick-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x"
        },
        "product_reference": "GraphicsMagick-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64"
        },
        "product_reference": "GraphicsMagick-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-devel-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64"
        },
        "product_reference": "GraphicsMagick-devel-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-devel-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le"
        },
        "product_reference": "GraphicsMagick-devel-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-devel-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x"
        },
        "product_reference": "GraphicsMagick-devel-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-devel-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64"
        },
        "product_reference": "GraphicsMagick-devel-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64"
        },
        "product_reference": "libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le"
        },
        "product_reference": "libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x"
        },
        "product_reference": "libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64"
        },
        "product_reference": "libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-devel-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64"
        },
        "product_reference": "libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-devel-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le"
        },
        "product_reference": "libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-devel-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x"
        },
        "product_reference": "libGraphicsMagick++-devel-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-devel-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64"
        },
        "product_reference": "libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64"
        },
        "product_reference": "libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le"
        },
        "product_reference": "libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x"
        },
        "product_reference": "libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64"
        },
        "product_reference": "libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick3-config-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64"
        },
        "product_reference": "libGraphicsMagick3-config-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick3-config-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le"
        },
        "product_reference": "libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick3-config-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x"
        },
        "product_reference": "libGraphicsMagick3-config-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick3-config-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64"
        },
        "product_reference": "libGraphicsMagick3-config-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64"
        },
        "product_reference": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le"
        },
        "product_reference": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x"
        },
        "product_reference": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64"
        },
        "product_reference": "libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-GraphicsMagick-1.3.25-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64"
        },
        "product_reference": "perl-GraphicsMagick-1.3.25-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-GraphicsMagick-1.3.25-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le"
        },
        "product_reference": "perl-GraphicsMagick-1.3.25-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-GraphicsMagick-1.3.25-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x"
        },
        "product_reference": "perl-GraphicsMagick-1.3.25-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-GraphicsMagick-1.3.25-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        },
        "product_reference": "perl-GraphicsMagick-1.3.25-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-1882",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-1882"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-1882",
          "url": "https://www.suse.com/security/cve/CVE-2009-1882"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 507728 for CVE-2009-1882",
          "url": "https://bugzilla.suse.com/507728"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2009-1882"
    },
    {
      "cve": "CVE-2009-3736",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-3736"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-3736",
          "url": "https://www.suse.com/security/cve/CVE-2009-3736"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 556122 for CVE-2009-3736",
          "url": "https://bugzilla.suse.com/556122"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2009-3736"
    },
    {
      "cve": "CVE-2012-3438",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2012-3438"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2012-3438",
          "url": "https://www.suse.com/security/cve/CVE-2012-3438"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 773612 for CVE-2012-3438",
          "url": "https://bugzilla.suse.com/773612"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 785093 for CVE-2012-3438",
          "url": "https://bugzilla.suse.com/785093"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2012-3438"
    },
    {
      "cve": "CVE-2016-2317",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2317"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2317",
          "url": "https://www.suse.com/security/cve/CVE-2016-2317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965853 for CVE-2016-2317",
          "url": "https://bugzilla.suse.com/965853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 999673 for CVE-2016-2317",
          "url": "https://bugzilla.suse.com/999673"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2317"
    },
    {
      "cve": "CVE-2016-3714",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3714"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3714",
          "url": "https://www.suse.com/security/cve/CVE-2016-3714"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1000484 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/1000484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1057163 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/1057163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105592 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/1105592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 978061 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/978061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 980401 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/980401"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982178 for CVE-2016-3714",
          "url": "https://bugzilla.suse.com/982178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-3714"
    },
    {
      "cve": "CVE-2016-3715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3715",
          "url": "https://www.suse.com/security/cve/CVE-2016-3715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1000484 for CVE-2016-3715",
          "url": "https://bugzilla.suse.com/1000484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1057163 for CVE-2016-3715",
          "url": "https://bugzilla.suse.com/1057163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105592 for CVE-2016-3715",
          "url": "https://bugzilla.suse.com/1105592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 978061 for CVE-2016-3715",
          "url": "https://bugzilla.suse.com/978061"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3715"
    },
    {
      "cve": "CVE-2016-3717",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3717"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3717",
          "url": "https://www.suse.com/security/cve/CVE-2016-3717"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1000484 for CVE-2016-3717",
          "url": "https://bugzilla.suse.com/1000484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1057163 for CVE-2016-3717",
          "url": "https://bugzilla.suse.com/1057163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105592 for CVE-2016-3717",
          "url": "https://bugzilla.suse.com/1105592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 978061 for CVE-2016-3717",
          "url": "https://bugzilla.suse.com/978061"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3717"
    },
    {
      "cve": "CVE-2016-3718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3718",
          "url": "https://www.suse.com/security/cve/CVE-2016-3718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1000484 for CVE-2016-3718",
          "url": "https://bugzilla.suse.com/1000484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1057163 for CVE-2016-3718",
          "url": "https://bugzilla.suse.com/1057163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105592 for CVE-2016-3718",
          "url": "https://bugzilla.suse.com/1105592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 978061 for CVE-2016-3718",
          "url": "https://bugzilla.suse.com/978061"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3718"
    },
    {
      "cve": "CVE-2016-5118",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5118"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
          "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5118",
          "url": "https://www.suse.com/security/cve/CVE-2016-5118"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1000484 for CVE-2016-5118",
          "url": "https://bugzilla.suse.com/1000484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982178 for CVE-2016-5118",
          "url": "https://bugzilla.suse.com/982178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:GraphicsMagick-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.25-1.1.x86_64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.aarch64",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.s390x",
            "openSUSE Tumbleweed:perl-GraphicsMagick-1.3.25-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5118"
    }
  ]
}

CVE-2016-2317 (GCVE-0-2016-2317)

Vulnerability from cvelistv5

Published

2017-02-03 15:00

Modified

2024-08-05 23:24

Severity ?

CWE

Summary

Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1306148	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/31/3	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/83241	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/05/20/4	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/05/27/4	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2016/dsa-3746	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/09/18/8	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/02/11/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/07/4	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:24:49.034Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2073",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html"
          },
          {
            "name": "openSUSE-SU-2016:1724",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306148"
          },
          {
            "name": "[oss-security] 20160531 Re: Security issues addressed in GraphicsMagick SVG reader",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/31/3"
          },
          {
            "name": "83241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83241"
          },
          {
            "name": "[oss-security] 20160520 Re: ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/20/4"
          },
          {
            "name": "[oss-security] 20160527 Security issues addressed in GraphicsMagick SVG reader",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/27/4"
          },
          {
            "name": "DSA-3746",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3746"
          },
          {
            "name": "SUSE-SU-2016:1783",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html"
          },
          {
            "name": "[oss-security] 20160918 Re: GraphicsMagick 1.3.25 fixes some security issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/18/8"
          },
          {
            "name": "[oss-security] 20160211 Re: CVE requests: Multiple vulnerabilities in GraphicsMagick parsing and processing SVG files",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/02/11/6"
          },
          {
            "name": "[oss-security] 20160906 GraphicsMagick 1.3.25 fixes some security issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/07/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-02-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-03T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2073",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html"
        },
        {
          "name": "openSUSE-SU-2016:1724",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306148"
        },
        {
          "name": "[oss-security] 20160531 Re: Security issues addressed in GraphicsMagick SVG reader",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/31/3"
        },
        {
          "name": "83241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/83241"
        },
        {
          "name": "[oss-security] 20160520 Re: ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/20/4"
        },
        {
          "name": "[oss-security] 20160527 Security issues addressed in GraphicsMagick SVG reader",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/27/4"
        },
        {
          "name": "DSA-3746",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3746"
        },
        {
          "name": "SUSE-SU-2016:1783",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html"
        },
        {
          "name": "[oss-security] 20160918 Re: GraphicsMagick 1.3.25 fixes some security issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/18/8"
        },
        {
          "name": "[oss-security] 20160211 Re: CVE requests: Multiple vulnerabilities in GraphicsMagick parsing and processing SVG files",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/02/11/6"
        },
        {
          "name": "[oss-security] 20160906 GraphicsMagick 1.3.25 fixes some security issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/07/4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-2317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2073",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html"
            },
            {
              "name": "openSUSE-SU-2016:1724",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1306148",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1306148"
            },
            {
              "name": "[oss-security] 20160531 Re: Security issues addressed in GraphicsMagick SVG reader",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/31/3"
            },
            {
              "name": "83241",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/83241"
            },
            {
              "name": "[oss-security] 20160520 Re: ImageMagick Is On Fire -- CVE-2016-3714",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/20/4"
            },
            {
              "name": "[oss-security] 20160527 Security issues addressed in GraphicsMagick SVG reader",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/27/4"
            },
            {
              "name": "DSA-3746",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3746"
            },
            {
              "name": "SUSE-SU-2016:1783",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html"
            },
            {
              "name": "[oss-security] 20160918 Re: GraphicsMagick 1.3.25 fixes some security issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/18/8"
            },
            {
              "name": "[oss-security] 20160211 Re: CVE requests: Multiple vulnerabilities in GraphicsMagick parsing and processing SVG files",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/02/11/6"
            },
            {
              "name": "[oss-security] 20160906 GraphicsMagick 1.3.25 fixes some security issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/07/4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-2317",
    "datePublished": "2017-02-03T15:00:00",
    "dateReserved": "2016-02-11T00:00:00",
    "dateUpdated": "2024-08-05T23:24:49.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3717 (GCVE-0-2016-3717)

Vulnerability from cvelistv5

Published

2016-05-05 18:00

Modified

2024-08-06 00:03

Severity ?

CWE

Summary

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.

References

►

URL

Tags

	http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2990-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/538378/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.exploit-db.com/exploits/39767/	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/03/18	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201611-21	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568	vendor-advisory, x_refsource_SLACKWARE
	https://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3580	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2016-0726.html	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
          },
          {
            "name": "openSUSE-SU-2016:1266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
          },
          {
            "name": "openSUSE-SU-2016:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
          },
          {
            "name": "USN-2990-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2990-1"
          },
          {
            "name": "openSUSE-SU-2016:1261",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
          },
          {
            "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
          },
          {
            "name": "39767",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39767/"
          },
          {
            "name": "SUSE-SU-2016:1260",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
          },
          {
            "name": "[debian-lts-announce] 20180627 [SECURITY] [DLA 1401-1] graphicsmagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
          },
          {
            "name": "GLSA-201611-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-21"
          },
          {
            "name": "SUSE-SU-2016:1275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
          },
          {
            "name": "SSA:2016-132-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/script/changelog.php"
          },
          {
            "name": "DSA-3580",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3580"
          },
          {
            "name": "RHSA-2016:0726",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
        },
        {
          "name": "openSUSE-SU-2016:1266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
        },
        {
          "name": "openSUSE-SU-2016:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
        },
        {
          "name": "USN-2990-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2990-1"
        },
        {
          "name": "openSUSE-SU-2016:1261",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
        },
        {
          "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
        },
        {
          "name": "39767",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39767/"
        },
        {
          "name": "SUSE-SU-2016:1260",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
        },
        {
          "name": "[debian-lts-announce] 20180627 [SECURITY] [DLA 1401-1] graphicsmagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
        },
        {
          "name": "GLSA-201611-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-21"
        },
        {
          "name": "SUSE-SU-2016:1275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
        },
        {
          "name": "SSA:2016-132-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/script/changelog.php"
        },
        {
          "name": "DSA-3580",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3580"
        },
        {
          "name": "RHSA-2016:0726",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-3717",
    "datePublished": "2016-05-05T18:00:00",
    "dateReserved": "2016-03-30T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3718 (GCVE-0-2016-3718)

Vulnerability from cvelistv5

Published

2016-05-05 18:00

Modified

2025-07-30 01:46

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Summary

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

References

►

URL

Tags

	http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2990-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/538378/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.exploit-db.com/exploits/39767/	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/03/18	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201611-21	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568	vendor-advisory, x_refsource_SLACKWARE
	https://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3580	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2016-0726.html	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.460Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
          },
          {
            "name": "openSUSE-SU-2016:1266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
          },
          {
            "name": "openSUSE-SU-2016:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
          },
          {
            "name": "USN-2990-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2990-1"
          },
          {
            "name": "openSUSE-SU-2016:1261",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
          },
          {
            "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
          },
          {
            "name": "39767",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39767/"
          },
          {
            "name": "SUSE-SU-2016:1260",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
          },
          {
            "name": "[debian-lts-announce] 20180627 [SECURITY] [DLA 1401-1] graphicsmagick security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
          },
          {
            "name": "GLSA-201611-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-21"
          },
          {
            "name": "SUSE-SU-2016:1275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
          },
          {
            "name": "SSA:2016-132-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/script/changelog.php"
          },
          {
            "name": "DSA-3580",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3580"
          },
          {
            "name": "RHSA-2016:0726",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2016-3718",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T13:27:43.837440Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2021-11-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3718"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-918",
                "description": "CWE-918 Server-Side Request Forgery (SSRF)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:46:38.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2021-11-03T00:00:00+00:00",
            "value": "CVE-2016-3718 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
        },
        {
          "name": "openSUSE-SU-2016:1266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
        },
        {
          "name": "openSUSE-SU-2016:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
        },
        {
          "name": "USN-2990-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2990-1"
        },
        {
          "name": "openSUSE-SU-2016:1261",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
        },
        {
          "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
        },
        {
          "name": "39767",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39767/"
        },
        {
          "name": "SUSE-SU-2016:1260",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
        },
        {
          "name": "[debian-lts-announce] 20180627 [SECURITY] [DLA 1401-1] graphicsmagick security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
        },
        {
          "name": "GLSA-201611-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-21"
        },
        {
          "name": "SUSE-SU-2016:1275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
        },
        {
          "name": "SSA:2016-132-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/script/changelog.php"
        },
        {
          "name": "DSA-3580",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3580"
        },
        {
          "name": "RHSA-2016:0726",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-3718",
    "datePublished": "2016-05-05T18:00:00.000Z",
    "dateReserved": "2016-03-30T00:00:00.000Z",
    "dateUpdated": "2025-07-30T01:46:38.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3715 (GCVE-0-2016-3715)

Vulnerability from cvelistv5

Published

2016-05-05 18:00

Modified

2025-07-30 01:46

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Summary

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

References

►

URL

Tags

	http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2990-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/538378/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.exploit-db.com/exploits/39767/	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/03/18	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2016/dsa-3746	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201611-21	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568	vendor-advisory, x_refsource_SLACKWARE
	https://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3580	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2016-0726.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/89852	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.450Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
          },
          {
            "name": "openSUSE-SU-2016:1266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
          },
          {
            "name": "openSUSE-SU-2016:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
          },
          {
            "name": "USN-2990-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2990-1"
          },
          {
            "name": "openSUSE-SU-2016:1261",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
          },
          {
            "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
          },
          {
            "name": "39767",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39767/"
          },
          {
            "name": "SUSE-SU-2016:1260",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
          },
          {
            "name": "DSA-3746",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3746"
          },
          {
            "name": "GLSA-201611-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-21"
          },
          {
            "name": "SUSE-SU-2016:1275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
          },
          {
            "name": "SSA:2016-132-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/script/changelog.php"
          },
          {
            "name": "DSA-3580",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3580"
          },
          {
            "name": "RHSA-2016:0726",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
          },
          {
            "name": "89852",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/89852"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2016-3715",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T13:27:17.433989Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2021-11-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3715"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-552",
                "description": "CWE-552 Files or Directories Accessible to External Parties",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:46:38.412Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2021-11-03T00:00:00+00:00",
            "value": "CVE-2016-3715 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
        },
        {
          "name": "openSUSE-SU-2016:1266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
        },
        {
          "name": "openSUSE-SU-2016:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
        },
        {
          "name": "USN-2990-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2990-1"
        },
        {
          "name": "openSUSE-SU-2016:1261",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
        },
        {
          "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
        },
        {
          "name": "39767",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39767/"
        },
        {
          "name": "SUSE-SU-2016:1260",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
        },
        {
          "name": "DSA-3746",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3746"
        },
        {
          "name": "GLSA-201611-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-21"
        },
        {
          "name": "SUSE-SU-2016:1275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
        },
        {
          "name": "SSA:2016-132-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/script/changelog.php"
        },
        {
          "name": "DSA-3580",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3580"
        },
        {
          "name": "RHSA-2016:0726",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
        },
        {
          "name": "89852",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/89852"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-3715",
    "datePublished": "2016-05-05T18:00:00.000Z",
    "dateReserved": "2016-03-30T00:00:00.000Z",
    "dateUpdated": "2025-07-30T01:46:38.412Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3714 (GCVE-0-2016-3714)

Vulnerability from cvelistv5

Published

2016-05-05 18:00

Modified

2025-07-30 01:46

Severity ?

8.4 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Summary

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

References

►

URL

Tags

	https://access.redhat.com/security/vulnerabilities/2296071	x_refsource_CONFIRM
	http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035742	vdb-entry, x_refsource_SECTRACK
	https://imagetragick.com/	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/03/13	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2990-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/538378/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.exploit-db.com/exploits/39767/	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html	vendor-advisory, x_refsource_SUSE
	http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/05/03/18	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2016/dsa-3746	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201611-21	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568	vendor-advisory, x_refsource_SLACKWARE
	https://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/39791/	exploit, x_refsource_EXPLOIT-DB
	http://www.debian.org/security/2016/dsa-3580	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/89848	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-0726.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1332492	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/250519	third-party-advisory, x_refsource_CERT-VN
	http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/2296071"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
          },
          {
            "name": "openSUSE-SU-2016:1266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
          },
          {
            "name": "1035742",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035742"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://imagetragick.com/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
          },
          {
            "name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"
          },
          {
            "name": "SUSE-SU-2016:1301",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"
          },
          {
            "name": "openSUSE-SU-2016:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
          },
          {
            "name": "USN-2990-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2990-1"
          },
          {
            "name": "openSUSE-SU-2016:1261",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
          },
          {
            "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
          },
          {
            "name": "39767",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39767/"
          },
          {
            "name": "SUSE-SU-2016:1260",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
          },
          {
            "name": "DSA-3746",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3746"
          },
          {
            "name": "GLSA-201611-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-21"
          },
          {
            "name": "SUSE-SU-2016:1275",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
          },
          {
            "name": "SSA:2016-132-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.imagemagick.org/script/changelog.php"
          },
          {
            "name": "39791",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/39791/"
          },
          {
            "name": "DSA-3580",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3580"
          },
          {
            "name": "89848",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/89848"
          },
          {
            "name": "RHSA-2016:0726",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"
          },
          {
            "name": "VU#250519",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/250519"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "imagemagick",
            "vendor": "imagemagick",
            "versions": [
              {
                "lessThanOrEqual": "6.9.3-9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "imagemagick",
            "vendor": "imagemagick",
            "versions": [
              {
                "status": "affected",
                "version": "7.0.0-0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "imagemagick",
            "vendor": "imagemagick",
            "versions": [
              {
                "status": "affected",
                "version": "7.0.1-0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ubuntu_linux",
            "vendor": "canonical",
            "versions": [
              {
                "status": "affected",
                "version": "12.04"
              },
              {
                "status": "affected",
                "version": "14.04"
              },
              {
                "status": "affected",
                "version": "15.10"
              },
              {
                "status": "affected",
                "version": "16.04"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ubuntu_linux",
            "vendor": "canonical",
            "versions": [
              {
                "status": "affected",
                "version": "12.04"
              },
              {
                "status": "affected",
                "version": "14.04"
              },
              {
                "status": "affected",
                "version": "15.10"
              },
              {
                "status": "affected",
                "version": "16.04"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ubuntu_linux",
            "vendor": "canonical",
            "versions": [
              {
                "status": "affected",
                "version": "12.04"
              },
              {
                "status": "affected",
                "version": "14.04"
              },
              {
                "status": "affected",
                "version": "15.10"
              },
              {
                "status": "affected",
                "version": "16.04"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ubuntu_linux",
            "vendor": "canonical",
            "versions": [
              {
                "status": "affected",
                "version": "12.04"
              },
              {
                "status": "affected",
                "version": "14.04"
              },
              {
                "status": "affected",
                "version": "15.10"
              },
              {
                "status": "affected",
                "version": "16.04"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "debian_linux",
            "vendor": "debian",
            "versions": [
              {
                "status": "affected",
                "version": "8.0"
              },
              {
                "status": "affected",
                "version": "9.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "debian_linux",
            "vendor": "debian",
            "versions": [
              {
                "status": "affected",
                "version": "8.0"
              },
              {
                "status": "affected",
                "version": "9.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "opensuse",
            "vendor": "opensuse",
            "versions": [
              {
                "status": "affected",
                "version": "13.2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "leap",
            "vendor": "opensuse",
            "versions": [
              {
                "status": "affected",
                "version": "42.1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "suse_linux_enterprise_server",
            "vendor": "suse",
            "versions": [
              {
                "status": "affected",
                "version": "12"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2016-3714",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-07T03:55:20.670421Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-09-09",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3714"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:46:38.542Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2024-09-09T00:00:00+00:00",
            "value": "CVE-2016-3714 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-03T18:06:06.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/2296071"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"
        },
        {
          "name": "openSUSE-SU-2016:1266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"
        },
        {
          "name": "1035742",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035742"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://imagetragick.com/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4\u0026t=29588"
        },
        {
          "name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"
        },
        {
          "name": "SUSE-SU-2016:1301",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"
        },
        {
          "name": "openSUSE-SU-2016:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"
        },
        {
          "name": "USN-2990-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2990-1"
        },
        {
          "name": "openSUSE-SU-2016:1261",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"
        },
        {
          "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"
        },
        {
          "name": "39767",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39767/"
        },
        {
          "name": "SUSE-SU-2016:1260",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"
        },
        {
          "name": "DSA-3746",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3746"
        },
        {
          "name": "GLSA-201611-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-21"
        },
        {
          "name": "SUSE-SU-2016:1275",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"
        },
        {
          "name": "SSA:2016-132-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.440568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.imagemagick.org/script/changelog.php"
        },
        {
          "name": "39791",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/39791/"
        },
        {
          "name": "DSA-3580",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3580"
        },
        {
          "name": "89848",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/89848"
        },
        {
          "name": "RHSA-2016:0726",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"
        },
        {
          "name": "VU#250519",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/250519"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-3714",
    "datePublished": "2016-05-05T18:00:00.000Z",
    "dateReserved": "2016-03-30T00:00:00.000Z",
    "dateUpdated": "2025-07-30T01:46:38.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1882 (GCVE-0-2009-1882)

Vulnerability from cvelistv5

Published

2009-06-02 15:00

Modified

2024-08-07 05:27

Severity ?

CWE

Summary

Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.

References

►

URL

Tags

	http://osvdb.org/54729	vdb-entry, x_refsource_OSVDB
	http://wiki.rpath.com/Advisories:rPSA-2010-0074	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-201311-10.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/37959	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2009/06/08/1	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/784-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/514516/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/35382	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/55721	third-party-advisory, x_refsource_SECUNIA
	http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/35111	vdb-entry, x_refsource_BID
	http://imagemagick.org/script/changelog.php	x_refsource_CONFIRM
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35216	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2009/dsa-1858	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2009/1449	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36260	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.833Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "54729",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/54729"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0074"
          },
          {
            "name": "GLSA-201311-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
          },
          {
            "name": "37959",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37959"
          },
          {
            "name": "[oss-security] 20090608 Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2009/06/08/1"
          },
          {
            "name": "USN-784-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/784-1/"
          },
          {
            "name": "20101027 rPSA-2010-0074-1 ImageMagick",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/514516/100/0/threaded"
          },
          {
            "name": "35382",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35382"
          },
          {
            "name": "FEDORA-2010-0001",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html"
          },
          {
            "name": "55721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55721"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html"
          },
          {
            "name": "35111",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35111"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://imagemagick.org/script/changelog.php"
          },
          {
            "name": "35685",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35685"
          },
          {
            "name": "35216",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35216"
          },
          {
            "name": "DSA-1858",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1858"
          },
          {
            "name": "SUSE-SR:2009:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
          },
          {
            "name": "ADV-2009-1449",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1449"
          },
          {
            "name": "FEDORA-2010-0036",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html"
          },
          {
            "name": "36260",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36260"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-05-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "54729",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/54729"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0074"
        },
        {
          "name": "GLSA-201311-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
        },
        {
          "name": "37959",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37959"
        },
        {
          "name": "[oss-security] 20090608 Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2009/06/08/1"
        },
        {
          "name": "USN-784-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/784-1/"
        },
        {
          "name": "20101027 rPSA-2010-0074-1 ImageMagick",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/514516/100/0/threaded"
        },
        {
          "name": "35382",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35382"
        },
        {
          "name": "FEDORA-2010-0001",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html"
        },
        {
          "name": "55721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55721"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html"
        },
        {
          "name": "35111",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35111"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://imagemagick.org/script/changelog.php"
        },
        {
          "name": "35685",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35685"
        },
        {
          "name": "35216",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35216"
        },
        {
          "name": "DSA-1858",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1858"
        },
        {
          "name": "SUSE-SR:2009:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
        },
        {
          "name": "ADV-2009-1449",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1449"
        },
        {
          "name": "FEDORA-2010-0036",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html"
        },
        {
          "name": "36260",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36260"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1882",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "54729",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/54729"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2010-0074",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0074"
            },
            {
              "name": "GLSA-201311-10",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
            },
            {
              "name": "37959",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37959"
            },
            {
              "name": "[oss-security] 20090608 Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage()",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2009/06/08/1"
            },
            {
              "name": "USN-784-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/784-1/"
            },
            {
              "name": "20101027 rPSA-2010-0074-1 ImageMagick",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/514516/100/0/threaded"
            },
            {
              "name": "35382",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35382"
            },
            {
              "name": "FEDORA-2010-0001",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html"
            },
            {
              "name": "55721",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55721"
            },
            {
              "name": "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html",
              "refsource": "CONFIRM",
              "url": "http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html"
            },
            {
              "name": "35111",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35111"
            },
            {
              "name": "http://imagemagick.org/script/changelog.php",
              "refsource": "CONFIRM",
              "url": "http://imagemagick.org/script/changelog.php"
            },
            {
              "name": "35685",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35685"
            },
            {
              "name": "35216",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35216"
            },
            {
              "name": "DSA-1858",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1858"
            },
            {
              "name": "SUSE-SR:2009:012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html"
            },
            {
              "name": "ADV-2009-1449",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1449"
            },
            {
              "name": "FEDORA-2010-0036",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html"
            },
            {
              "name": "36260",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36260"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1882",
    "datePublished": "2009-06-02T15:00:00",
    "dateReserved": "2009-06-02T00:00:00",
    "dateUpdated": "2024-08-07T05:27:54.833Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-3736 (GCVE-0-2009-3736)

Vulnerability from cvelistv5

Published

2009-11-27 20:00

Modified

2024-08-07 06:38

Severity ?

CWE

Summary

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

References

►

URL

Tags

	http://security.gentoo.org/glsa/glsa-201311-10.xml	vendor-advisory, x_refsource_GENTOO
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:105	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:091	vendor-advisory, x_refsource_MANDRIVA
	http://support.avaya.com/css/P8/documents/100074869	x_refsource_CONFIRM
	ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz	x_refsource_CONFIRM
	http://secunia.com/advisories/39299	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38577	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38617	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:035	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37414	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=537941	x_refsource_CONFIRM
	http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup	x_refsource_CONFIRM
	http://secunia.com/advisories/55721	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38190	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951	vdb-entry, signature, x_refsource_OVAL
	http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html	vendor-advisory, x_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2010-0039.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:307	vendor-advisory, x_refsource_MANDRIVA
	http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/43617	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html	vendor-advisory, x_refsource_FEDORA
	http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2011/0574	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/37128	vdb-entry, x_refsource_BID
	http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/37489	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39347	third-party-advisory, x_refsource_SECUNIA
	https://rhn.redhat.com/errata/RHSA-2010-0095.html	vendor-advisory, x_refsource_REDHAT
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38696	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37997	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38915	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:38:29.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201311-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
          },
          {
            "name": "MDVSA-2010:105",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105"
          },
          {
            "name": "FEDORA-2010-1872",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html"
          },
          {
            "name": "MDVSA-2010:091",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100074869"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz"
          },
          {
            "name": "39299",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39299"
          },
          {
            "name": "38577",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38577"
          },
          {
            "name": "38617",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38617"
          },
          {
            "name": "MDVSA-2010:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035"
          },
          {
            "name": "37414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37414"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=537941"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841\u0026view=markup"
          },
          {
            "name": "55721",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55721"
          },
          {
            "name": "FEDORA-2010-1924",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html"
          },
          {
            "name": "38190",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38190"
          },
          {
            "name": "oval:org.mitre.oval:def:6951",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5\u0026id=29b48580df75f0c5baa2962548a4c101ec7ed7ec"
          },
          {
            "name": "FEDORA-2009-12813",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html"
          },
          {
            "name": "FEDORA-2011-1967",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html"
          },
          {
            "name": "RHSA-2010:0039",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0039.html"
          },
          {
            "name": "MDVSA-2009:307",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:307"
          },
          {
            "name": "SUSE-SR:2010:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html"
          },
          {
            "name": "FEDORA-2011-1990",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html"
          },
          {
            "name": "43617",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43617"
          },
          {
            "name": "FEDORA-2011-1958",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html"
          },
          {
            "name": "[libtool] 20091116 GNU Libtool 2.2.6b released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html"
          },
          {
            "name": "ADV-2011-0574",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0574"
          },
          {
            "name": "37128",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37128"
          },
          {
            "name": "[libtool] 20091116 Backport of libltdl changes to branch-1-5",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html"
          },
          {
            "name": "37489",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37489"
          },
          {
            "name": "39347",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39347"
          },
          {
            "name": "RHSA-2010:0095",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
          },
          {
            "name": "oval:org.mitre.oval:def:11687",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687"
          },
          {
            "name": "38696",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38696"
          },
          {
            "name": "37997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37997"
          },
          {
            "name": "38915",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38915"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-11-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "GLSA-201311-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
        },
        {
          "name": "MDVSA-2010:105",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105"
        },
        {
          "name": "FEDORA-2010-1872",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html"
        },
        {
          "name": "MDVSA-2010:091",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100074869"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz"
        },
        {
          "name": "39299",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39299"
        },
        {
          "name": "38577",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38577"
        },
        {
          "name": "38617",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38617"
        },
        {
          "name": "MDVSA-2010:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035"
        },
        {
          "name": "37414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37414"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=537941"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841\u0026view=markup"
        },
        {
          "name": "55721",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55721"
        },
        {
          "name": "FEDORA-2010-1924",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html"
        },
        {
          "name": "38190",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38190"
        },
        {
          "name": "oval:org.mitre.oval:def:6951",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5\u0026id=29b48580df75f0c5baa2962548a4c101ec7ed7ec"
        },
        {
          "name": "FEDORA-2009-12813",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html"
        },
        {
          "name": "FEDORA-2011-1967",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html"
        },
        {
          "name": "RHSA-2010:0039",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0039.html"
        },
        {
          "name": "MDVSA-2009:307",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:307"
        },
        {
          "name": "SUSE-SR:2010:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html"
        },
        {
          "name": "FEDORA-2011-1990",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html"
        },
        {
          "name": "43617",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43617"
        },
        {
          "name": "FEDORA-2011-1958",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html"
        },
        {
          "name": "[libtool] 20091116 GNU Libtool 2.2.6b released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html"
        },
        {
          "name": "ADV-2011-0574",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0574"
        },
        {
          "name": "37128",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37128"
        },
        {
          "name": "[libtool] 20091116 Backport of libltdl changes to branch-1-5",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html"
        },
        {
          "name": "37489",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37489"
        },
        {
          "name": "39347",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39347"
        },
        {
          "name": "RHSA-2010:0095",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
        },
        {
          "name": "oval:org.mitre.oval:def:11687",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687"
        },
        {
          "name": "38696",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38696"
        },
        {
          "name": "37997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37997"
        },
        {
          "name": "38915",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38915"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-3736",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201311-10",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml"
            },
            {
              "name": "MDVSA-2010:105",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:105"
            },
            {
              "name": "FEDORA-2010-1872",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html"
            },
            {
              "name": "MDVSA-2010:091",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:091"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100074869",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100074869"
            },
            {
              "name": "ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz",
              "refsource": "CONFIRM",
              "url": "ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz"
            },
            {
              "name": "39299",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39299"
            },
            {
              "name": "38577",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38577"
            },
            {
              "name": "38617",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38617"
            },
            {
              "name": "MDVSA-2010:035",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:035"
            },
            {
              "name": "37414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37414"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=537941",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=537941"
            },
            {
              "name": "http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841\u0026view=markup",
              "refsource": "CONFIRM",
              "url": "http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841\u0026view=markup"
            },
            {
              "name": "55721",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55721"
            },
            {
              "name": "FEDORA-2010-1924",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html"
            },
            {
              "name": "38190",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38190"
            },
            {
              "name": "oval:org.mitre.oval:def:6951",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951"
            },
            {
              "name": "http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5\u0026id=29b48580df75f0c5baa2962548a4c101ec7ed7ec",
              "refsource": "CONFIRM",
              "url": "http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5\u0026id=29b48580df75f0c5baa2962548a4c101ec7ed7ec"
            },
            {
              "name": "FEDORA-2009-12813",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html"
            },
            {
              "name": "FEDORA-2011-1967",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html"
            },
            {
              "name": "RHSA-2010:0039",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0039.html"
            },
            {
              "name": "MDVSA-2009:307",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:307"
            },
            {
              "name": "SUSE-SR:2010:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html"
            },
            {
              "name": "FEDORA-2011-1990",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html"
            },
            {
              "name": "43617",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/43617"
            },
            {
              "name": "FEDORA-2011-1958",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html"
            },
            {
              "name": "[libtool] 20091116 GNU Libtool 2.2.6b released",
              "refsource": "MLIST",
              "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html"
            },
            {
              "name": "ADV-2011-0574",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0574"
            },
            {
              "name": "37128",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37128"
            },
            {
              "name": "[libtool] 20091116 Backport of libltdl changes to branch-1-5",
              "refsource": "MLIST",
              "url": "http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html"
            },
            {
              "name": "37489",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37489"
            },
            {
              "name": "39347",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39347"
            },
            {
              "name": "RHSA-2010:0095",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
            },
            {
              "name": "oval:org.mitre.oval:def:11687",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687"
            },
            {
              "name": "38696",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38696"
            },
            {
              "name": "37997",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37997"
            },
            {
              "name": "38915",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38915"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-3736",
    "datePublished": "2009-11-27T20:00:00",
    "dateReserved": "2009-10-22T00:00:00",
    "dateUpdated": "2024-08-07T06:38:29.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3438 (GCVE-0-2012-3438)

Vulnerability from cvelistv5

Published

2012-08-07 21:00

Modified

2024-08-06 20:05

Severity ?

CWE

Summary

The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.

References

►

URL

Tags

	http://www.mandriva.com/security/advisories?name=MDVSA-2012:165	vendor-advisory, x_refsource_MANDRIVA
	http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2	x_refsource_CONFIRM
	http://secunia.com/advisories/50090	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/77259	vdb-entry, x_refsource_XF
	http://lists.opensuse.org/opensuse-updates/2013-03/msg00102.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/54716	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=844105	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:05:12.559Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2012:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:165"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2"
          },
          {
            "name": "50090",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50090"
          },
          {
            "name": "graphicsmagick-png-dos(77259)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77259"
          },
          {
            "name": "openSUSE-SU-2013:0536",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00102.html"
          },
          {
            "name": "54716",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54716"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=844105"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDVSA-2012:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:165"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2"
        },
        {
          "name": "50090",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50090"
        },
        {
          "name": "graphicsmagick-png-dos(77259)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77259"
        },
        {
          "name": "openSUSE-SU-2013:0536",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00102.html"
        },
        {
          "name": "54716",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54716"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=844105"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-3438",
    "datePublished": "2012-08-07T21:00:00",
    "dateReserved": "2012-06-14T00:00:00",
    "dateUpdated": "2024-08-06T20:05:12.559Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5118 (GCVE-0-2016-5118)

Vulnerability from cvelistv5

Published

2016-06-10 15:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2016:1237	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1035985	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035984	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90938	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/05/30/1	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2990-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3591	vendor-advisory, x_refsource_DEBIAN
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397749	vendor-advisory, x_refsource_SLACKWARE
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3746	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/05/29/7	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html	vendor-advisory, x_refsource_SUSE
	http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8	x_refsource_CONFIRM
	http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.880Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1237",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1237"
          },
          {
            "name": "1035985",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035985"
          },
          {
            "name": "SUSE-SU-2016:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858"
          },
          {
            "name": "openSUSE-SU-2016:1534",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2016:1521",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html"
          },
          {
            "name": "1035984",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035984"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "90938",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90938"
          },
          {
            "name": "[oss-security] 20160529 Re: CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/30/1"
          },
          {
            "name": "USN-2990-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2990-1"
          },
          {
            "name": "DSA-3591",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3591"
          },
          {
            "name": "SSA:2016-152-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.397749"
          },
          {
            "name": "SUSE-SU-2016:1614",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "DSA-3746",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3746"
          },
          {
            "name": "[oss-security] 20160529 CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/29/7"
          },
          {
            "name": "SUSE-SU-2016:1610",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html"
          },
          {
            "name": "openSUSE-SU-2016:1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2016:1522",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2016:1237",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1237"
        },
        {
          "name": "1035985",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035985"
        },
        {
          "name": "SUSE-SU-2016:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858"
        },
        {
          "name": "openSUSE-SU-2016:1534",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2016:1521",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html"
        },
        {
          "name": "1035984",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035984"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "90938",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90938"
        },
        {
          "name": "[oss-security] 20160529 Re: CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/30/1"
        },
        {
          "name": "USN-2990-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2990-1"
        },
        {
          "name": "DSA-3591",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3591"
        },
        {
          "name": "SSA:2016-152-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.397749"
        },
        {
          "name": "SUSE-SU-2016:1614",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "DSA-3746",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3746"
        },
        {
          "name": "[oss-security] 20160529 CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/29/7"
        },
        {
          "name": "SUSE-SU-2016:1610",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html"
        },
        {
          "name": "openSUSE-SU-2016:1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2016:1522",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5118",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1237",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1237"
            },
            {
              "name": "1035985",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035985"
            },
            {
              "name": "SUSE-SU-2016:1570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html"
            },
            {
              "name": "http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858",
              "refsource": "CONFIRM",
              "url": "http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858"
            },
            {
              "name": "openSUSE-SU-2016:1534",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2016:1521",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html"
            },
            {
              "name": "1035984",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035984"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "90938",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90938"
            },
            {
              "name": "[oss-security] 20160529 Re: CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/30/1"
            },
            {
              "name": "USN-2990-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2990-1"
            },
            {
              "name": "DSA-3591",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3591"
            },
            {
              "name": "SSA:2016-152-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.397749"
            },
            {
              "name": "SUSE-SU-2016:1614",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "DSA-3746",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3746"
            },
            {
              "name": "[oss-security] 20160529 CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/29/7"
            },
            {
              "name": "SUSE-SU-2016:1610",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html"
            },
            {
              "name": "openSUSE-SU-2016:1653",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2016:1522",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html"
            },
            {
              "name": "http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8",
              "refsource": "CONFIRM",
              "url": "http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8"
            },
            {
              "name": "http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog",
              "refsource": "CONFIRM",
              "url": "http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5118",
    "datePublished": "2016-06-10T15:00:00",
    "dateReserved": "2016-05-29T00:00:00",
    "dateUpdated": "2024-08-06T00:53:47.880Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

opensuse-su-2024:10505-1

Vulnerability from csaf_opensuse

CVE-2016-2317 (GCVE-0-2016-2317)

Vulnerability from cvelistv5

CVE-2016-3717 (GCVE-0-2016-3717)

Vulnerability from cvelistv5

CVE-2016-3718 (GCVE-0-2016-3718)

Vulnerability from cvelistv5

CVE-2016-3715 (GCVE-0-2016-3715)

Vulnerability from cvelistv5

CVE-2016-3714 (GCVE-0-2016-3714)

Vulnerability from cvelistv5

CVE-2009-1882 (GCVE-0-2009-1882)

Vulnerability from cvelistv5

CVE-2009-3736 (GCVE-0-2009-3736)

Vulnerability from cvelistv5

CVE-2012-3438 (GCVE-0-2012-3438)

Vulnerability from cvelistv5

CVE-2016-5118 (GCVE-0-2016-5118)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature