Buffer overflow in ImageMagick - CVE-2022-28463

Vulnerability identifier: #VU62851

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-28463

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing Image files. A remote attacker can pass specially crafted data to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

ImageMagick
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
Ubuntu
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Module for Development Tools
openSUSE Leap
cflinuxfs3
libmagickwand-6.q16-dev (Ubuntu package)
libimage-magick-q16-perl (Ubuntu package)
libmagickwand-6.q16-6 (Ubuntu package)
imagemagick-6-common (Ubuntu package)
libmagickcore-6-headers (Ubuntu package)
imagemagick-6.q16 (Ubuntu package)
libmagickwand-dev (Ubuntu package)
libmagick++-6.q16hdri-dev (Ubuntu package)
libimage-magick-perl (Ubuntu package)
libmagick++-dev (Ubuntu package)
perlmagick (Ubuntu package)
imagemagick (Ubuntu package)
libmagick++5 (Ubuntu package)
libmagickcore5-extra (Ubuntu package)
libmagick++-6.q16-dev (Ubuntu package)
libmagickwand5 (Ubuntu package)
libmagickcore5 (Ubuntu package)
imagemagick-common (Ubuntu package)
libmagickwand-6.q16-2 (Ubuntu package)
libmagickcore-6.q16-2 (Ubuntu package)
libmagickcore-6.q16-dev (Ubuntu package)
libmagick++-6.q16-5v5 (Ubuntu package)
libmagickcore-6.q16-2-extra (Ubuntu package)
libmagickcore-dev (Ubuntu package)
libmagickcore-6-arch-config (Ubuntu package)
imagemagick-6.q16hdri (Ubuntu package)
libmagickcore-6.q16hdri-3 (Ubuntu package)
libmagick++-6.q16-7 (Ubuntu package)
libmagickcore-6.q16-3 (Ubuntu package)
libmagickwand-6.q16-3 (Ubuntu package)
libmagick++-6.q16hdri-7 (Ubuntu package)
libmagick++-6.q16-8 (Ubuntu package)
libmagickcore-6.q16hdri-6 (Ubuntu package)
libmagick++-6.q16hdri-8 (Ubuntu package)
libmagickcore-6.q16-6 (Ubuntu package)
libMagick++-devel
ImageMagick-devel
perl-PerlMagick
libMagickCore-6_Q16-1-debuginfo-32bit
perl-PerlMagick-debuginfo
libMagickCore-6_Q16-1-32bit
ImageMagick-config-6-SUSE
ImageMagick-config-6-upstream
ImageMagick-debuginfo
ImageMagick-debugsource
libMagickCore-6_Q16-1
libMagickCore-6_Q16-1-debuginfo
libMagickWand-6_Q16-1
libMagickWand-6_Q16-1-debuginfo
ImageMagick
libMagick++-6_Q16-3
libMagick++-6_Q16-3-debuginfo
libmagickcore-6.q16-3-extra (Ubuntu package)
libmagickcore-6.q16-6-extra (Ubuntu package)
ImageMagick-config-7-upstream
libMagickCore-7_Q16HDRI6
libMagick++-7_Q16HDRI4-debuginfo
libMagickWand-7_Q16HDRI6-debuginfo
ImageMagick-config-7-SUSE
libMagickWand-7_Q16HDRI6
libMagickCore-7_Q16HDRI6-debuginfo
libMagick++-7_Q16HDRI4
ImageMagick-extra
libMagickWand-7_Q16HDRI10
libMagickWand-7_Q16HDRI10-debuginfo
libMagickCore-7_Q16HDRI10-debuginfo
libMagickCore-7_Q16HDRI10
libMagick++-7_Q16HDRI5-debuginfo
ImageMagick-devel-32bit
libMagick++-7_Q16HDRI5
libMagick++-7_Q16HDRI5-32bit
ImageMagick-extra-debuginfo
libMagickCore-7_Q16HDRI10-32bit
libMagick++-7_Q16HDRI5-32bit-debuginfo
ImageMagick-doc
libMagickWand-7_Q16HDRI10-32bit-debuginfo
libMagickWand-7_Q16HDRI10-32bit
libMagick++-devel-32bit
libMagickCore-7_Q16HDRI10-32bit-debuginfo
Isolation Segment
VMware Tanzu Application Service for VMs

Install updates from vendor's website.

ImageMagick - addressed in versions 6.9.12-44, 7.1.0-29
cflinuxfs3 - addressed in versions 0.302.0, 0.339.0
libmagickwand-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libimage-magick-q16-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6-common (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6-headers (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6.q16 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.8.9.97ubuntu5.16+esm2, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16hdri-dev (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libimage-magick-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
perlmagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 6.7.7.10-6ubuntu3
libmagickcore5-extra (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagick++-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 6.7.7.10-6ubuntu3
imagemagick-common (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore-6.q16-2 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.8.9.97ubuntu5.16+esm2
libmagickcore-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5
libmagick++-6.q16-5v5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.8.9.97ubuntu5.16+esm2
libmagickcore-6.q16-2-extra (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6-arch-config (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1
imagemagick-6.q16hdri (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16hdri-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagick++-6.q16-7 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickcore-6.q16-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickwand-6.q16-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagick++-6.q16hdri-7 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.13, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagick++-6.q16-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16hdri-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16hdri-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
Isolation Segment - addressed in versions 2.7.47, 2.10.27, 2.11.16, 2.12.10
VMware Tanzu Application Service for VMs - addressed in versions 2.7.52, 2.10.34, 2.11.22, 2.12.15, 2.13.7
libMagick++-devel - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
ImageMagick-devel - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
perl-PerlMagick - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagickCore-6_Q16-1-debuginfo-32bit - update to 6.8.8.1-71.172.1
perl-PerlMagick-debuginfo - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagickCore-6_Q16-1-32bit - update to 6.8.8.1-71.172.1
ImageMagick-config-6-SUSE - update to 6.8.8.1-71.172.1
ImageMagick-config-6-upstream - update to 6.8.8.1-71.172.1
ImageMagick-debuginfo - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
ImageMagick-debugsource - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagickCore-6_Q16-1 - update to 6.8.8.1-71.172.1
libMagickCore-6_Q16-1-debuginfo - update to 6.8.8.1-71.172.1
libMagickWand-6_Q16-1 - update to 6.8.8.1-71.172.1
libMagickWand-6_Q16-1-debuginfo - update to 6.8.8.1-71.172.1
ImageMagick - addressed in versions 6.8.8.1-71.172.1, 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagick++-6_Q16-3 - update to 6.8.8.1-71.172.1
libMagick++-6_Q16-3-debuginfo - update to 6.8.8.1-71.172.1
libmagickcore-6.q16-3-extra (Ubuntu package) - update to 8:6.9.7.4+dfsg-16ubuntu6.14
ImageMagick - update to 6.9.10.68-3.24
libmagickcore-6.q16-6-extra (Ubuntu package) - update to 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1
ImageMagick-config-7-upstream - addressed in versions 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagickCore-7_Q16HDRI6 - update to 7.0.7.34-150000.3.123.1
libMagick++-7_Q16HDRI4-debuginfo - update to 7.0.7.34-150000.3.123.1
libMagickWand-7_Q16HDRI6-debuginfo - update to 7.0.7.34-150000.3.123.1
ImageMagick-config-7-SUSE - addressed in versions 7.0.7.34-150000.3.123.1, 7.1.0.9-150400.6.6.1
libMagickWand-7_Q16HDRI6 - update to 7.0.7.34-150000.3.123.1
libMagickCore-7_Q16HDRI6-debuginfo - update to 7.0.7.34-150000.3.123.1
libMagick++-7_Q16HDRI4 - update to 7.0.7.34-150000.3.123.1
ImageMagick-extra - update to 7.1.0.9-150400.6.6.1
libMagickWand-7_Q16HDRI10 - update to 7.1.0.9-150400.6.6.1
libMagickWand-7_Q16HDRI10-debuginfo - update to 7.1.0.9-150400.6.6.1
libMagickCore-7_Q16HDRI10-debuginfo - update to 7.1.0.9-150400.6.6.1
libMagickCore-7_Q16HDRI10 - update to 7.1.0.9-150400.6.6.1
libMagick++-7_Q16HDRI5-debuginfo - update to 7.1.0.9-150400.6.6.1
ImageMagick-devel-32bit - update to 7.1.0.9-150400.6.6.1
libMagick++-7_Q16HDRI5 - update to 7.1.0.9-150400.6.6.1
libMagick++-7_Q16HDRI5-32bit - update to 7.1.0.9-150400.6.6.1
ImageMagick-extra-debuginfo - update to 7.1.0.9-150400.6.6.1
libMagickCore-7_Q16HDRI10-32bit - update to 7.1.0.9-150400.6.6.1
libMagick++-7_Q16HDRI5-32bit-debuginfo - update to 7.1.0.9-150400.6.6.1
ImageMagick-doc - update to 7.1.0.9-150400.6.6.1
libMagickWand-7_Q16HDRI10-32bit-debuginfo - update to 7.1.0.9-150400.6.6.1
libMagickWand-7_Q16HDRI10-32bit - update to 7.1.0.9-150400.6.6.1
libMagick++-devel-32bit - update to 7.1.0.9-150400.6.6.1
libMagickCore-7_Q16HDRI10-32bit-debuginfo - update to 7.1.0.9-150400.6.6.1

• https://github.com/ImageMagick/ImageMagick6/commit/e6ea5876e0228165ee3abc6e959aa174cee06680
• https://github.com/ImageMagick/ImageMagick/issues/4988
• https://github.com/ImageMagick/ImageMagick/commit/ca3654ebf7a439dc736f56f083c9aa98e4464b7f

• Multiple vulnerabilities in ImageMagick
• Ubuntu update for imagemagick
• Remote code execution in cflinuxfs3
• SUSE update for ImageMagick
• Ubuntu update for imagemagick
• Cloud Foundry Foundation cflinuxfs3 update for ImageMagick
• Amazon Linux AMI update for ImageMagick
• SUSE update for ImageMagick
• VMware Tanzu products update for ImageMagick
• Ubuntu update for imagemagick
• SUSE update for ImageMagick
• Gentoo update for ImageMagick