Known vulnerabilities in libmagick++4 (Ubuntu package) 8:6.6.9.7-5ubuntu2

Version: 8:6.6.9.7-5ubuntu2
Software CPE: cpe:2.3:o:canonical:libmagick_plus_plus_4_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 10
Public exploits: 5
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libmagick++4 (Ubuntu package) version 8:6.6.9.7-5ubuntu2 libmagick++4 (Ubuntu package) 8:6.6.9.7-5ubuntu2 is affected by 10 vulnerabilities: 1 critical, 2 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU39581 - Improper input validation
CVE-2017-6498
CWE-20 Medium
No
No
8:6.6.9.7-5ubuntu3.9 06.03.2017 SB2017030623
SB20170314180
#VU39582 - Improper input validation
CVE-2017-6499
CWE-20 Medium
No
No
8:6.6.9.7-5ubuntu3.9 06.03.2017 SB2017030623
SB20170314180
#VU39583 - Out-of-bounds read
CVE-2017-6500
CWE-125 Medium
No
No
8:6.6.9.7-5ubuntu3.9 06.03.2017 SB2017030623
SB20170314180
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718
CWE-918 High
Public exploit available
Exploited
8:6.6.9.7-5ubuntu3.4 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5849 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3717
CWE-200 Low
Public exploit available
No
8:6.6.9.7-5ubuntu3.4 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5848 - Improper input validation
CVE-2016-3716
CWE-20 Medium
Public exploit available
No
8:6.6.9.7-5ubuntu3.4 17.02.2017 SB2016050301
SB2016051102
SB2016050702
and 5 more
#VU5847 - Improper input validation
CVE-2016-3715
CWE-20 Medium
Public exploit available
Exploited
8:6.6.9.7-5ubuntu3.4 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 6 more
#VU5846 - Improper input validation
CVE-2016-3714
CWE-20 Critical
Public exploit available
Exploited
8:6.6.9.7-5ubuntu3.4 17.02.2017 SB2016042801
SB2016050601
SB2016051304
and 9 more
#VU32204 - Improper Access Control
CVE-2016-5118
CWE-284 High
No
No
8:6.6.9.7-5ubuntu3.4 10.06.2016 SB2016061004
SB2016062202
SB2016061705
and 5 more
#VU43758 - Improper input validation
CVE-2012-3437
CWE-20 Low
No
No
8:6.6.9.7-5ubuntu3.2 08.08.2012 SB2012080803
SB2015082203