REDHAT-BUG-2210659: Command Injection
Published May 29, 2023
·Updated
RCE (shell command injection) vulnerability in OpenBlob with --enable-pipes configured https://github.com/ImageMagick/ImageMagick/issues/6339
Affected Software
1 affected component
ImageMagick OpenBlob
Event History
May 29, 2023
Data Sourced
via Red Hat·05:25 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2210659?
The severity of REDHAT-BUG-2210659 is critical due to the potential for remote code execution.
2
How do I fix REDHAT-BUG-2210659?
To fix REDHAT-BUG-2210659, update your ImageMagick package to the latest version that addresses this vulnerability.
3
What software is affected by REDHAT-BUG-2210659?
REDHAT-BUG-2210659 affects the OpenBlob component of ImageMagick when configured with --enable-pipes.
4
What types of attacks can REDHAT-BUG-2210659 facilitate?
REDHAT-BUG-2210659 can facilitate shell command injection attacks that may allow an attacker to execute arbitrary code.
5
Is there a workaround for REDHAT-BUG-2210659?
A possible workaround for REDHAT-BUG-2210659 is to disable the --enable-pipes option in ImageMagick if immediate patching is not feasible.