- Vulnerability/
- USN-4192-1
14/11/2019
USN-4192-1: ImageMagick vulnerabilities
First published: Thu Nov 14 2019(Updated: )
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/imagemagick | <8:6.9.10.23+dfsg-2.1ubuntu3.1 | 8:6.9.10.23+dfsg-2.1ubuntu3.1 |
| =19.10 | ||
| All of | ||
| ubuntu/imagemagick-6.q16 | <8:6.9.10.23+dfsg-2.1ubuntu3.1 | 8:6.9.10.23+dfsg-2.1ubuntu3.1 |
| =19.10 | ||
| All of | ||
| ubuntu/libmagick++-6.q16-8 | <8:6.9.10.23+dfsg-2.1ubuntu3.1 | 8:6.9.10.23+dfsg-2.1ubuntu3.1 |
| =19.10 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-6 | <8:6.9.10.23+dfsg-2.1ubuntu3.1 | 8:6.9.10.23+dfsg-2.1ubuntu3.1 |
| =19.10 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-6-extra | <8:6.9.10.23+dfsg-2.1ubuntu3.1 | 8:6.9.10.23+dfsg-2.1ubuntu3.1 |
| =19.10 | ||
| All of | ||
| ubuntu/imagemagick | <8:6.9.10.14+dfsg-7ubuntu2.3 | 8:6.9.10.14+dfsg-7ubuntu2.3 |
| =19.04 | ||
| All of | ||
| ubuntu/imagemagick-6.q16 | <8:6.9.10.14+dfsg-7ubuntu2.3 | 8:6.9.10.14+dfsg-7ubuntu2.3 |
| =19.04 | ||
| All of | ||
| ubuntu/libmagick++-6.q16-8 | <8:6.9.10.14+dfsg-7ubuntu2.3 | 8:6.9.10.14+dfsg-7ubuntu2.3 |
| =19.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-6 | <8:6.9.10.14+dfsg-7ubuntu2.3 | 8:6.9.10.14+dfsg-7ubuntu2.3 |
| =19.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-6-extra | <8:6.9.10.14+dfsg-7ubuntu2.3 | 8:6.9.10.14+dfsg-7ubuntu2.3 |
| =19.04 | ||
| All of | ||
| ubuntu/imagemagick | <8:6.9.7.4+dfsg-16ubuntu6.8 | 8:6.9.7.4+dfsg-16ubuntu6.8 |
| =18.04 | ||
| All of | ||
| ubuntu/imagemagick-6.q16 | <8:6.9.7.4+dfsg-16ubuntu6.8 | 8:6.9.7.4+dfsg-16ubuntu6.8 |
| =18.04 | ||
| All of | ||
| ubuntu/libmagick++-6.q16-7 | <8:6.9.7.4+dfsg-16ubuntu6.8 | 8:6.9.7.4+dfsg-16ubuntu6.8 |
| =18.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-3 | <8:6.9.7.4+dfsg-16ubuntu6.8 | 8:6.9.7.4+dfsg-16ubuntu6.8 |
| =18.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-3-extra | <8:6.9.7.4+dfsg-16ubuntu6.8 | 8:6.9.7.4+dfsg-16ubuntu6.8 |
| =18.04 | ||
| All of | ||
| ubuntu/imagemagick | <8:6.8.9.9-7ubuntu5.15 | 8:6.8.9.9-7ubuntu5.15 |
| =16.04 | ||
| All of | ||
| ubuntu/imagemagick-6.q16 | <8:6.8.9.9-7ubuntu5.15 | 8:6.8.9.9-7ubuntu5.15 |
| =16.04 | ||
| All of | ||
| ubuntu/libmagick++-6.q16-5v5 | <8:6.8.9.9-7ubuntu5.15 | 8:6.8.9.9-7ubuntu5.15 |
| =16.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-2 | <8:6.8.9.9-7ubuntu5.15 | 8:6.8.9.9-7ubuntu5.15 |
| =16.04 | ||
| All of | ||
| ubuntu/libmagickcore-6.q16-2-extra | <8:6.8.9.9-7ubuntu5.15 | 8:6.8.9.9-7ubuntu5.15 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-12974
- https://ubuntu.com/security/CVE-2019-12975
- https://ubuntu.com/security/CVE-2019-12976
- https://ubuntu.com/security/CVE-2019-12977
- https://ubuntu.com/security/CVE-2019-12978
- https://ubuntu.com/security/CVE-2019-12979
- https://ubuntu.com/security/CVE-2019-13135
- https://ubuntu.com/security/CVE-2019-13137
- https://ubuntu.com/security/CVE-2019-13295
- https://ubuntu.com/security/CVE-2019-13297
- https://ubuntu.com/security/CVE-2019-13300
- https://ubuntu.com/security/CVE-2019-13301
- https://ubuntu.com/security/CVE-2019-13304
- https://ubuntu.com/security/CVE-2019-13305
- https://ubuntu.com/security/CVE-2019-13306
- https://ubuntu.com/security/CVE-2019-13307
- https://ubuntu.com/security/CVE-2019-13308
- https://ubuntu.com/security/CVE-2019-13309
- https://ubuntu.com/security/CVE-2019-13310
- https://ubuntu.com/security/CVE-2019-13311
- https://ubuntu.com/security/CVE-2019-13391
- https://ubuntu.com/security/CVE-2019-13454
- https://ubuntu.com/security/CVE-2019-14981
- https://ubuntu.com/security/CVE-2019-15139
- https://ubuntu.com/security/CVE-2019-15140
- https://ubuntu.com/security/CVE-2019-16708
- https://ubuntu.com/security/CVE-2019-16709
- https://ubuntu.com/security/CVE-2019-16710
- https://ubuntu.com/security/CVE-2019-16711
- https://ubuntu.com/security/CVE-2019-16713
- https://ubuntu.com/security/notices/USN-6985-1
- https://ubuntu.com/security/notices/USN-7053-1
- https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu3.1
- https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.14+dfsg-7ubuntu2.3
- https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.8
- https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.15
- https://ubuntu.com/security/notices/USN-4192-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- CVE-2019-12974
- CVE-2019-12975
- CVE-2019-12976
- CVE-2019-12977
- CVE-2019-12978
- CVE-2019-12979
- CVE-2019-13135
- CVE-2019-13137
- CVE-2019-13295
- CVE-2019-13297
- CVE-2019-13300
- CVE-2019-13301
- CVE-2019-13304
- CVE-2019-13305
- CVE-2019-13306
- CVE-2019-13307
- CVE-2019-13308
- CVE-2019-13309
- CVE-2019-13310
- CVE-2019-13311
- CVE-2019-13391
- CVE-2019-13454
- CVE-2019-14981
- CVE-2019-15139
- CVE-2019-15140
- CVE-2019-16708
- CVE-2019-16709
- CVE-2019-16710
- CVE-2019-16711
- CVE-2019-16713
Frequently Asked Questions
What is the vulnerability ID for these ImageMagick vulnerabilities?
The vulnerability ID for these ImageMagick vulnerabilities is CVE-2019-12974, CVE-2019-12975, and CVE-2019-12976.
What is the severity of the ImageMagick vulnerabilities?
The severity of the ImageMagick vulnerabilities is not specified.
How do these vulnerabilities affect ImageMagick?
These vulnerabilities in ImageMagick could allow an attacker to cause a denial of service or possibly execute code with the privileges of the user or automated system using ImageMagick.
Which versions of Ubuntu are affected by these vulnerabilities?
These vulnerabilities affect Ubuntu versions 19.10, 19.04, 18.04, and 16.04.
How can I fix the ImageMagick vulnerabilities?
To fix the ImageMagick vulnerabilities, you should update to version 8:6.9.10.23+dfsg-2.1ubuntu3.1 for the affected packages.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/description
- agent/title
- collector/usn
- source/Ubuntu
- anchor-related/USN-6985-1
- anchor-related/USN-7053-1
- agent/software-canonical-lookup
- agent/references
- agent/tags
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04