CVE-2023-34153: Command Injection
A vulnerability was found in ImageMagick. This issue may allow shell command injection via video:vsync or video:pixel-format options in VIDEO encoding/decoding.
Other sources
A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.
Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding https://github.com/ImageMagick/ImageMagick/issues/6338
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-34153?
CVE-2023-34153 is a vulnerability found in ImageMagick that allows shell command injection via video:vsync or video:pixel-format options in video encoding/decoding.
Which software is affected by CVE-2023-34153?
CVE-2023-34153 affects ImageMagick, specifically version 7.1.1.11, Fedoraproject Extra Packages For Enterprise Linux version 8.0, Fedoraproject Fedora version 37 and 38, and Redhat Enterprise Linux versions 6.0 and 7.0.
What is the severity of CVE-2023-34153?
CVE-2023-34153 has a severity level of 7, which is classified as high.
How can I fix CVE-2023-34153?
To fix CVE-2023-34153, make sure to update ImageMagick to a version that includes the security patch provided by the developer.
Where can I find more information about CVE-2023-34153?
You can find more information about CVE-2023-34153 on the official ImageMagick GitHub page, Red Hat's security advisory, and Bugzilla.