Known vulnerabilities in imagemagick-6.q16 (Ubuntu package) 8:6.8.9.9-5ubuntu2

Vendor: Canonical Ltd.
Software: imagemagick-6.q16 (Ubuntu package)
Version: 8:6.8.9.9-5ubuntu2
Software CPE: cpe:2.3:o:canonical:imagemagick-6.q16_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 81
Public exploits: 5
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting imagemagick-6.q16 (Ubuntu package) version 8:6.8.9.9-5ubuntu2 imagemagick-6.q16 (Ubuntu package) 8:6.8.9.9-5ubuntu2 is affected by 81 vulnerabilities: 1 critical, 19 high, 33 medium, 28 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15353 - Memory corruption
CVE-2018-16645		 CWE-119 Low
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 14.10.2018 SB2018101406
SB2018092206
SB2018091702
and 5 more
#VU15352 - Improper input validation
CVE-2018-16644		 CWE-20 Low
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 14.10.2018 SB2018101406
SB2018102908
SB2019050305
and 7 more
#VU15351 - Heap-based Buffer Overflow
CVE-2018-16642		 CWE-122 High
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 14.10.2018 SB2018101406
SB2018101722
SB2019040481
and 2 more
#VU33730 - Improper input validation
CVE-2018-16640		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 07.09.2018 SB2018101722
SB2019040480
SB2018100516
and 1 more
#VU33484 - Improper input validation
CVE-2018-16643		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 07.09.2018 SB2018101722
SB2019040482
SB2018100516
and 1 more
#VU31219 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16323		 CWE-200 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 01.09.2018 SB2018090101
SB2018092418
SB2018090812
and 3 more
#VU14465 - Missing release of memory after effective lifetime
CVE-2018-14435		 CWE-401 Low
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 19.08.2018 SB2018082012
SB2018082013
SB2018092418
and 10 more
#VU33482 - Memory corruption
CVE-2018-14551		 CWE-119 High
No
No
 8:6.9.7.4+dfsg-16ubuntu6.4 23.07.2018 SB2019040475
SB2018100413
#VU33729 - Improper input validation
CVE-2018-14434		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 20.07.2018 SB2018092418
SB2018082503
SB2019040471
and 9 more
#VU33480 - Missing release of memory after effective lifetime
CVE-2018-14436		 CWE-401 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 20.07.2018 SB2018092418
SB2018082503
SB2019040473
and 8 more
#VU33481 - Missing release of memory after effective lifetime
CVE-2018-14437		 CWE-401 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 20.07.2018 SB2018092418
SB2018082503
SB2019040474
and 8 more
#VU39581 - Improper input validation
CVE-2017-6498		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU39582 - Improper input validation
CVE-2017-6499		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU39583 - Out-of-bounds read
CVE-2017-6500		 CWE-125 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718		 CWE-918 High
Public exploit available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5849 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3717		 CWE-200 Low
Public exploit available
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5848 - Improper input validation
CVE-2016-3716		 CWE-20 Medium
Public exploit available
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051102
SB2016050702
and 5 more
#VU5847 - Improper input validation
CVE-2016-3715		 CWE-20 Medium
Public exploit available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5846 - Improper input validation
CVE-2016-3714		 CWE-20 Critical
Public exploit available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016042801
SB2016050601
SB2016051304
and 9 more
#VU32204 - Improper Access Control
CVE-2016-5118		 CWE-284 High
No
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 10.06.2016 SB2016061004
SB2016062202
SB2016061705
and 5 more


Showing elements 1 - 20 out of 81