Known vulnerabilities in imagemagick-6.q16 (Ubuntu package) - page 3

Vendor: Canonical Ltd.
Software: imagemagick-6.q16 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:imagemagick-6.q16_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 125
Public exploits: 8
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting imagemagick-6.q16 (Ubuntu package) imagemagick-6.q16 (Ubuntu package) is affected by 125 known vulnerabilities: 1 critical, 28 high, 62 medium, 34 low Critical High Medium Low

Vulnerabilities (125)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61578 - Divide By Zero
CVE-2021-20176		 CWE-369 Medium
No
No
 8:6.8.9.9-7ubuntu5.16+esm2 23.03.2022 SB2022032313
SB2021121020
SB2023120304
and 1 more
#VU61575 - Integer overflow
CVE-2020-27770		 CWE-190 Medium
No
No
 8:6.8.9.9-7ubuntu5.16+esm2 23.03.2022 SB2022032313
#VU61574 - Integer overflow
CVE-2020-27766		 CWE-190 High
No
No
 8:6.8.9.9-7ubuntu5.16+esm2 23.03.2022 SB2022032313
#VU61573 - Integer overflow
CVE-2020-27762		 CWE-190 Medium
No
No
 8:6.8.9.9-7ubuntu5.16+esm2 23.03.2022 SB2022032313
#VU33730 - Improper input validation
CVE-2018-16640		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 07.09.2018 SB2018101722
SB2019040480
SB2018100516
and 1 more
#VU31219 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16323		 CWE-200 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 01.09.2018 SB2018090101
SB2018092418
SB2018090812
and 3 more
#VU14465 - Missing release of memory after effective lifetime
CVE-2018-14435		 CWE-401 Low
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 19.08.2018 SB2018082012
SB2018082013
SB2018092418
and 10 more
#VU33482 - Memory corruption
CVE-2018-14551		 CWE-119 High
No
No
 8:6.9.7.4+dfsg-16ubuntu6.4 23.07.2018 SB2019040475
SB2018100413
#VU33729 - Improper input validation
CVE-2018-14434		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.8.9.9-7ubuntu5.14, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, 8:6.9.10.14+dfsg-7ubuntu2.2 20.07.2018 SB2018092418
SB2018082503
SB2019040471
and 9 more
#VU33480 - Missing release of memory after effective lifetime
CVE-2018-14436		 CWE-401 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 20.07.2018 SB2018092418
SB2018082503
SB2019040473
and 8 more
#VU33481 - Missing release of memory after effective lifetime
CVE-2018-14437		 CWE-401 Medium
No
No
 8:6.8.9.9-7ubuntu5.13, 8:6.9.7.4+dfsg-16ubuntu6.4 20.07.2018 SB2018092418
SB2018082503
SB2019040474
and 8 more
#VU39581 - Improper input validation
CVE-2017-6498		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU39582 - Improper input validation
CVE-2017-6499		 CWE-20 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU39583 - Out-of-bounds read
CVE-2017-6500		 CWE-125 Medium
No
No
 8:6.8.9.9-7ubuntu5.6, 8:6.8.9.9-7ubuntu8.5 06.03.2017 SB2017030623
SB20170314180
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718		 CWE-918 High
Available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5849 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3717		 CWE-200 Low
Available
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5848 - Improper input validation
CVE-2016-3716		 CWE-20 Medium
Available
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051102
SB2016050702
and 5 more
#VU5847 - Improper input validation
CVE-2016-3715		 CWE-20 Medium
Available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5846 - Improper input validation
CVE-2016-3714		 CWE-20 Critical
Available
Exploited
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 17.02.2017 SB2016042801
SB2016050601
SB2016051304
and 9 more
#VU32204 - Improper Access Control
CVE-2016-5118		 CWE-284 High
No
No
 8:6.8.9.9-5ubuntu2.1, 8:6.8.9.9-7ubuntu5.1 10.06.2016 SB2016061004
SB2016062202
SB2016061705
and 5 more


Showing elements 41 - 60 out of 125