Known vulnerabilities in libmagick++4 (Ubuntu package) 8:6.6.9.7-5ubuntu3.3
Vendor:
Canonical Ltd.
Software:
libmagick++4 (Ubuntu package)
Version:
8:6.6.9.7-5ubuntu3.3
Software CPE:
cpe:2.3:o:canonical:libmagick_plus_plus_4_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
9
Public exploits:
5
Known exploited (KEV):
3
Vulnerabilities by Severity
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU39581 - Improper input validation CVE-2017-6498 |
CWE-20 | Medium | 8:6.6.9.7-5ubuntu3.9 | 06.03.2017 |
SB2017030623 SB20170314180 |
||
| #VU39582 - Improper input validation CVE-2017-6499 |
CWE-20 | Medium | 8:6.6.9.7-5ubuntu3.9 | 06.03.2017 |
SB2017030623 SB20170314180 |
||
| #VU39583 - Out-of-bounds read CVE-2017-6500 |
CWE-125 | Medium | 8:6.6.9.7-5ubuntu3.9 | 06.03.2017 |
SB2017030623 SB20170314180 |
||
| #VU5850 - Server-Side Request Forgery (SSRF) CVE-2016-3718 |
CWE-918 | High | 8:6.6.9.7-5ubuntu3.4 | 17.02.2017 |
SB2016050301 SB2016051806 SB2016051102 and 6 more |
||
| #VU5849 - Exposure of sensitive information to an unauthorized actor CVE-2016-3717 |
CWE-200 | Low | 8:6.6.9.7-5ubuntu3.4 | 17.02.2017 |
SB2016050301 SB2016051806 SB2016051102 and 6 more |
||
| #VU5848 - Improper input validation CVE-2016-3716 |
CWE-20 | Medium | 8:6.6.9.7-5ubuntu3.4 | 17.02.2017 |
SB2016050301 SB2016051102 SB2016050702 and 5 more |
||
| #VU5847 - Improper input validation CVE-2016-3715 |
CWE-20 | Medium | 8:6.6.9.7-5ubuntu3.4 | 17.02.2017 |
SB2016050301 SB2016051806 SB2016051102 and 6 more |
||
| #VU5846 - Improper input validation CVE-2016-3714 |
CWE-20 | Critical | 8:6.6.9.7-5ubuntu3.4 | 17.02.2017 |
SB2016042801 SB2016050601 SB2016051304 and 9 more |
||
| #VU32204 - Improper Access Control CVE-2016-5118 |
CWE-284 | High | 8:6.6.9.7-5ubuntu3.4 | 10.06.2016 |
SB2016061004 SB2016062202 SB2016061705 and 5 more |