Known vulnerabilities in ImageMagick - page 2
Vendor:
Fedoraproject
Software:
ImageMagick
Software CPE:
cpe:2.3:o:fedoraproject:imagemagick:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
39
Public exploits:
4
Known exploited (KEV):
0
Breakdown by Severity Chart
6.9.13.58-1.el9
6.9.13.58-1.el8
7.1.2.33-1.fc44
7.1.2.33-1.fc45
7.1.2.33-1.fc43
7.1.2.33-1.fc46
7.1.2.32-1.el10_2
7.1.2.32-1.el10_3
7.1.2.32-1.fc45
7.1.2.31-2.fc45
7.1.2.29-2.fc46
7.1.2.29-2.fc45
6.9.13.52-2.el8
6.9.13.52-1.el9
6.9.13.52-1.el8
7.1.2.27-1.fc43
7.1.2.27-1.fc44
7.1.2.27-1.el10_3
6.9.13.50-1.el9
6.9.13.50-1.el8
6.9.13.49-1.el9
6.9.13.49-1.el8
7.1.2.13-2.fc44
7.1.2.13-2.fc45
6.9.10.86-1.fc31
6.9.10.86-1.el8
6.9.10.75-1.fc30
6.9.10.75-1.fc31
6.9.10.64-1.fc31
6.9.10.64-1.fc30
6.9.9.38-1.fc26
6.9.9.38-1.fc27
6.9.9.38-1.fc28
6.9.9.22-1.fc26
6.9.9.22-1.fc27
6.9.9.19-1.fc25
6.9.9.19-1.fc26
6.9.9.19-1.fc27
6.9.9.15-1.fc25
6.9.9.15-1.fc26
6.9.9.15-1.fc27
6.9.9.13-1.fc27
6.9.9.13-1.fc25
6.9.9.13-1.fc26
7.0.6-9.2.fc26
7.0.6-9.2.fc25
6.9.2.7-1.fc22
6.9.2.7-1.fc23
6.8.8.10-9.fc22
6.8.8.10-6.fc21
7.1.1.26-2.fc39
7.1.1.26-2.fc38
6.9.12.63-1.el8
6.9.12.63-1.el9
6.9.12.63-1.fc35
6.9.12.63-1.fc36
6.9.12.63-1.fc37
6.9.12.62-1.el8
6.9.12.62-1.el9
6.9.12.62-1.fc35
6.9.12.62-1.fc36
6.9.12.62-1.fc37
6.9.12.61-1.el8
6.9.12.48-2.el8
6.9.12.31-1.fc34
6.9.12.31-1.fc35
6.9.12.30-1.fc35
6.9.12.28-1.fc35
6.9.13.14-1.el8
6.9.13.14-1.el9
7.1.1.26-1.fc38
7.1.1.26-1.fc39
6.9.12.93-1.el8
6.9.12.93-1.el9
6.9.12.93-1.fc37
7.1.1.15-1.fc38
7.1.1.11-1.fc38
7.1.1.10-1.fc38
6.9.12.86-1.fc37
6.9.12.86-1.el8
7.1.1.4-3.fc38
6.9.12.82-1.el8
6.9.12.82-1.el9
6.9.12.82-1.fc36
6.9.12.82-1.fc37
7.1.1.4-2.fc38
6.9.12.77-1.el8
6.9.12.77-1.el9
6.9.12.77-1.fc36
6.9.12.77-1.fc37
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81039 - Missing release of memory after effective lifetime CVE-2022-48541 |
CWE-401 | Low | 7.1.1.26-1.fc38, 7.1.1.26-1.fc39, 7.1.1.26-2.fc38, 7.1.1.26-2.fc39 | 21.09.2023 |
SB2023092135 SB2023092136 SB2023092604 and 5 more |
||
| #VU79869 - Missing release of memory after effective lifetime CVE-2023-39978 |
CWE-401 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.fc37 | 22.08.2023 |
SB2023082240 SB2023082247 SB2023082813 and 3 more |
||
| #VU79868 - Heap-based Buffer Overflow CVE-2023-2157 |
CWE-122 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.el9 | 22.08.2023 |
SB2023082239 SB2023082248 SB2023082813 and 5 more |
||
| #VU79837 - Use After Free CVE-2023-34475 |
CWE-416 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.el9, 6.9.12.93-1.fc37, 7.1.1.15-1.fc38 | 22.08.2023 |
SB20230820156 SB2023082237 SB2023082247 and 5 more |
||
| #VU79740 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-34152 |
CWE-78 | High | 6.9.12.93-1.el8, 6.9.12.93-1.fc37, 7.1.1.10-1.fc38, 7.1.1.11-1.fc38 | 20.08.2023 |
SB20230820156 SB20230820184 SB20230820188 and 2 more |
||
| #VU78580 - Heap-based Buffer Overflow CVE-2023-34474 |
CWE-122 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.el9, 6.9.12.93-1.fc37, 7.1.1.15-1.fc38 | 24.07.2023 |
SB2023072434 SB2023072439 SB2023082237 and 6 more |
||
| #VU77938 - Memory corruption CVE-2023-3428 |
CWE-119 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.fc37 | 04.07.2023 |
SB2023070429 SB2023070431 SB2023072008 and 6 more |
||
| #VU77451 - Stack-based buffer overflow CVE-2023-3195 |
CWE-121 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.fc37, 7.1.1.15-1.fc38 | 15.06.2023 |
SB2023061550 SB2023070431 SB2023071822 and 7 more |
||
| #VU76764 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-34153 |
CWE-78 | High | 6.9.12.93-1.el8, 6.9.12.93-1.el9, 6.9.12.93-1.fc37, 7.1.1.10-1.fc38, 7.1.1.11-1.fc38 | 01.06.2023 |
SB2023060141 SB2023060146 SB20230820184 and 7 more |
||
| #VU76763 - Improper input validation CVE-2023-34151 |
CWE-20 | Medium | 6.9.12.93-1.el8, 6.9.12.93-1.fc37, 7.1.1.10-1.fc38, 7.1.1.11-1.fc38 | 01.06.2023 |
SB2023060141 SB2023060145 SB2023060146 and 16 more |
||
| #VU74569 - Heap-based Buffer Overflow CVE-2023-1906 |
CWE-122 | High | 6.9.12.86-1.el8, 6.9.12.86-1.fc37 | 06.04.2023 |
SB2023040664 SB2023042045 SB2023070431 and 7 more |
||
| #VU72079 - Resource Management Errors CVE-2022-44267 |
CWE-399 | Low | 6.9.12.77-1.el8, 6.9.12.77-1.el9, 6.9.12.77-1.fc36, 6.9.12.77-1.fc37 | 09.02.2023 |
SB2023020911 SB2023021005 SB2023021560 and 16 more |
||
| #VU72078 - Exposure of sensitive information to an unauthorized actor CVE-2022-44268 |
CWE-200 | Medium | 6.9.12.77-1.el8, 6.9.12.77-1.el9, 6.9.12.77-1.fc36, 6.9.12.77-1.fc37 | 09.02.2023 |
SB2023020911 SB2023021005 SB2023021560 and 16 more |
||
| #VU68074 - Missing release of memory after effective lifetime CVE-2021-3574 |
CWE-401 | Medium | 6.9.12.62-1.el8, 6.9.12.62-1.el9, 6.9.12.62-1.fc35, 6.9.12.62-1.fc36, 6.9.12.62-1.fc37, 6.9.12.63-1.el8, 6.9.12.63-1.el9, 6.9.12.63-1.fc35, 6.9.12.63-1.fc37 | 10.10.2022 |
SB2022101002 SB2022101005 SB2022112407 and 12 more |
||
| #VU67652 - Heap-based Buffer Overflow CVE-2022-3213 |
CWE-122 | Low | 6.9.12.63-1.el8, 6.9.12.63-1.el9, 6.9.12.63-1.fc35, 6.9.12.63-1.fc36, 6.9.12.63-1.fc37 | 26.09.2022 |
SB2022092626 SB2022100201 SB2022101466 and 6 more |
||
| #VU66952 - Reachable Assertion CVE-2022-2719 |
CWE-617 | Medium | 6.9.12.63-1.el8, 6.9.12.63-1.el9, 6.9.12.63-1.fc35, 6.9.12.63-1.fc37 | 02.09.2022 |
SB2022070617 SB2022090239 SB2022090829 and 7 more |
||
| #VU61503 - Out-of-bounds write CVE-2020-25664 |
CWE-787 | High | 6.9.12.31-1.fc34 | 21.03.2022 |
SB2022032313 SB2021030526 SB2021112623 |
||
| #VU11810 - NULL Pointer Dereference CVE-2017-14505 |
CWE-476 | Low | 6.9.9.22-1.fc26, 6.9.9.22-1.fc27 | 13.04.2018 |
SB2018031613 SB2017110708 SB2017110709 |
||
| #VU11808 - NULL Pointer Dereference CVE-2017-13768 |
CWE-476 | Low | 6.9.9.15-1.fc25, 6.9.9.15-1.fc26, 6.9.9.15-1.fc27 | 13.04.2018 |
SB2018031613 SB2017092818 SB2017092819 and 1 more |
Showing elements 21 - 40 out of 39