USN-6621-1: ImageMagick vulnerability
Published Feb 1, 2024
·Updated
It was discovered that ImageMagick incorrectly handled certain values when processing BMP files. An attacker could exploit this to cause a denial of service.
Affected Software
36 affected componentsFixes available
All of the following
ubuntu/imagemagick<8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/imagemagick-6.q16<8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libmagickcore-6.q16-6<8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libmagickcore-6.q16-6-extra<8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/imagemagick<8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/imagemagick-6.q16<8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libmagickcore-6.q16-6<8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libmagickcore-6.q16-6-extra<8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/imagemagick<8:6.9.7.4+dfsg-16ubuntu6.15+esm3
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libmagickcore-6.q16-3<8:6.9.7.4+dfsg-16ubuntu6.15+esm3
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libmagickcore-6.q16-3-extra<8:6.9.7.4+dfsg-16ubuntu6.15+esm3
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Ubuntu Ubuntu=18.04
All of the following
ubuntu/imagemagick<8:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm10
Ubuntu Ubuntu=16.04
All of the following
ubuntu/imagemagick-6.q16<8:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm10
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libmagickcore-6.q16-2<8:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm10
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libmagickcore-6.q16-2-extra<8:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm10
Ubuntu Ubuntu=16.04
All of the following
ubuntu/imagemagick<8:6.7.7.10-6ubuntu3.13+esm7
8:6.7.7.10-6ubuntu3.13+esm7
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libmagickcore5<8:6.7.7.10-6ubuntu3.13+esm7
8:6.7.7.10-6ubuntu3.13+esm7
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libmagickcore5-extra<8:6.7.7.10-6ubuntu3.13+esm7
8:6.7.7.10-6ubuntu3.13+esm7
Ubuntu Ubuntu=14.04
Event History
Feb 1, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6621-1?
The severity of USN-6621-1 is classified as important due to the potential for denial of service.
2
How do I fix USN-6621-1?
To fix USN-6621-1, update to the latest version of ImageMagick and its related packages.
3
What specific versions are affected by USN-6621-1?
USN-6621-1 affects multiple versions of ImageMagick and its associated libraries on Ubuntu 22.04 and earlier.
4
What are the risks associated with the USN-6621-1 vulnerability?
Exploiting the USN-6621-1 vulnerability could cause a denial of service, leading to application crashes.
5
Is there a workaround for USN-6621-1 until a fix can be applied?
Currently, the best course of action is to update the affected packages to mitigate the risks of USN-6621-1.