USN-3363-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-3ubuntu1.2 - Upgrade
Upgrade
ubuntu/imagemagick-6.q16to a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-3ubuntu1.2 - Upgrade
Upgrade
ubuntu/libmagick++-6.q16-7to a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-3ubuntu1.2 - Upgrade
Upgrade
ubuntu/libmagickcore-6.q16-3to a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-3ubuntu1.2 - Upgrade
Upgrade
ubuntu/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.8.9.9-7ubuntu5.8 - Upgrade
Upgrade
ubuntu/imagemagick-6.q16to a version that resolves this vulnerability.Fixed in 8:6.8.9.9-7ubuntu5.8 - Upgrade
Upgrade
ubuntu/libmagick++-6.q16-5v5to a version that resolves this vulnerability.Fixed in 8:6.8.9.9-7ubuntu5.8 - Upgrade
Upgrade
ubuntu/libmagickcore-6.q16-2to a version that resolves this vulnerability.Fixed in 8:6.8.9.9-7ubuntu5.8 - Upgrade
Upgrade
ubuntu/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.7.7.10-6ubuntu3.8 - Upgrade
Upgrade
ubuntu/libmagick++5to a version that resolves this vulnerability.Fixed in 8:6.7.7.10-6ubuntu3.8 - Upgrade
Upgrade
ubuntu/libmagickcore5to a version that resolves this vulnerability.Fixed in 8:6.7.7.10-6ubuntu3.8
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for these ImageMagick vulnerabilities?
The vulnerability ID for these ImageMagick vulnerabilities is CVE-2017-10928, CVE-2017-11141, and CVE-2017-11170.
What is the severity of CVE-2017-10928?
The severity of CVE-2017-10928 is not mentioned in the provided information.
How do I fix these ImageMagick vulnerabilities?
To fix these ImageMagick vulnerabilities, update ImageMagick and related packages to version 8:6.9.7.4+dfsg-3ubuntu1.2 or higher, if available, or follow the recommendations from the Ubuntu advisory.
Where can I find more information about CVE-2017-10928?
You can find more information about CVE-2017-10928 on the Ubuntu security website.