REDHAT-BUG-2210660: Command Injection
First published: Mon May 29 2023(Updated: )
Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding <a href="https://github.com/ImageMagick/ImageMagick/issues/6338">https://github.com/ImageMagick/ImageMagick/issues/6338</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ImageMagick |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/ImageMagick/ImageMagick/issues/6338
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2210661
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2210662
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2210663
- https://access.redhat.com/security/cve/cve-2023-34153
- https://bugzilla.redhat.com/show_bug.cgi?id=2210660
Frequently Asked Questions
What is the severity of REDHAT-BUG-2210660?
The severity of REDHAT-BUG-2210660 is critical due to the potential for shell command injection.
How do I fix REDHAT-BUG-2210660?
To fix REDHAT-BUG-2210660, update ImageMagick to the latest version that addresses the vulnerability.
What are the main risks associated with REDHAT-BUG-2210660?
The main risks associated with REDHAT-BUG-2210660 include unauthorized command execution and system compromise.
Who is affected by REDHAT-BUG-2210660?
Users of ImageMagick who utilize the VIDEO encoding/decoding options are affected by REDHAT-BUG-2210660.
What actions should I take if I am affected by REDHAT-BUG-2210660?
If you are affected by REDHAT-BUG-2210660, discontinue use of the vulnerable features until you can apply the necessary update.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-34153
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/imagemagick
- canonical/imagemagick