USN-7068-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into processing a specially crafted file, an attacker could exploit this to cause a denial of service or affect the reliability of the system. The vulnerabilities included memory leaks, buffer overflows, and improper handling of pixel data.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2019-7398
- CVE-2020-27767
- CVE-2020-27770
- CVE-2020-27761
- CVE-2020-27763
- CVE-2020-27776
- CVE-2020-27750
- CVE-2020-27755
- CVE-2020-27764
- CVE-2020-27766
- CVE-2020-25674
- CVE-2020-27768
- CVE-2020-27775
- CVE-2020-27769
- CVE-2020-25676
- CVE-2020-25666
- CVE-2020-27753
- CVE-2020-27771
- CVE-2020-27765
- CVE-2020-27773
- CVE-2019-7397
- CVE-2020-27774
- CVE-2020-27560
- CVE-2020-27754
- CVE-2020-27762
- CVE-2020-27758
- CVE-2019-9956
- CVE-2020-27760
- CVE-2020-25664
- CVE-2020-27759
- CVE-2020-27772
- CVE-2020-25665
- CVE-2020-19667
Frequently Asked Questions
What is the severity of USN-7068-1?
The severity of USN-7068-1 is considered high as it allows attackers to cause denial of service conditions.
How can I fix USN-7068-1?
To fix USN-7068-1, update your ImageMagick installation to version 8:6.8.9.9-7ubuntu5.16+esm11 or later.
Which software is affected by USN-7068-1?
USN-7068-1 affects ImageMagick and various related libraries in Ubuntu 16.04 and 14.04 versions.
What types of attacks can be executed through USN-7068-1?
Through USN-7068-1, attackers can exploit malformed image files to achieve denial of service.
Who discovered the vulnerability in USN-7068-1?
The vulnerability in USN-7068-1 was discovered by security researchers analyzing ImageMagick.