Stack-based buffer overflow in ImageMagick - CVE-2023-3195

Vulnerability identifier: #VU77451

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3195

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack

The vulnerability exists due to a boundary error in coders/tiff.c. A remote attacker can pass a specially crafted TIFF file to the application, trigger a stack overflow and crash the application.

ImageMagick
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
Fedora
Oracle Solaris
SUSE Linux Enterprise Workstation Extension 12
Ubuntu
openEuler
libmagickwand-6.q16-dev (Ubuntu package)
libmagickcore-6.q16-3 (Ubuntu package)
imagemagick-6-common (Ubuntu package)
libmagickwand-6.q16-3 (Ubuntu package)
libmagickwand-6.q16-6 (Ubuntu package)
libmagickcore-6.q16-6 (Ubuntu package)
libmagickcore-6.q16-2 (Ubuntu package)
libmagick++-6.q16hdri-7 (Ubuntu package)
libimage-magick-q16-perl (Ubuntu package)
libmagick++-6.q16-dev (Ubuntu package)
libimage-magick-perl (Ubuntu package)
imagemagick (Ubuntu package)
libmagick++-6.q16-8 (Ubuntu package)
libmagickcore-6.q16-dev (Ubuntu package)
libmagick++-dev (Ubuntu package)
libmagick++-6.q16hdri-8 (Ubuntu package)
perlmagick (Ubuntu package)
libmagickcore-6.q16hdri-6 (Ubuntu package)
libmagickwand-6.q16-2 (Ubuntu package)
libmagick++-6.q16hdri-dev (Ubuntu package)
imagemagick-6.q16hdri (Ubuntu package)
libmagick++-6.q16-5v5 (Ubuntu package)
libmagickwand-dev (Ubuntu package)
libmagickcore-6.q16hdri-3 (Ubuntu package)
imagemagick-6.q16 (Ubuntu package)
imagemagick-common (Ubuntu package)
libmagick++-6.q16-7 (Ubuntu package)
libmagickcore-6-headers (Ubuntu package)
libmagickcore-dev (Ubuntu package)
ImageMagick-config-6-SUSE
libMagickCore-6_Q16-1-debuginfo
ImageMagick-debugsource
ImageMagick-config-6-upstream
libMagickCore-6_Q16-1
ImageMagick-debuginfo
libMagickWand-6_Q16-1
libMagickWand-6_Q16-1-debuginfo
libMagickCore-6_Q16-1-debuginfo-32bit
ImageMagick
perl-PerlMagick-debuginfo
perl-PerlMagick
libMagick++-6_Q16-3
ImageMagick-devel
libMagick++-6_Q16-3-debuginfo
libMagickCore-6_Q16-1-32bit
libMagick++-devel
ImageMagick-c++
ImageMagick-perl
ImageMagick-c++-devel
ImageMagick-help

Install updates from vendor's website.

ImageMagick - update to 6.9.12-26
libmagickwand-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-3 (Ubuntu package) - update to Ubuntu Pro
imagemagick-6-common (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-3 (Ubuntu package) - update to Ubuntu Pro
libmagickwand-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagick++-6.q16hdri-7 (Ubuntu package) - update to Ubuntu Pro
libimage-magick-q16-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libimage-magick-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5
libmagick++-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16hdri-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
perlmagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16hdri-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagick++-6.q16hdri-dev (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6.q16hdri (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16-5v5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickwand-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16hdri-3 (Ubuntu package) - update to Ubuntu Pro
imagemagick-6.q16 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-common (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16-7 (Ubuntu package) - update to Ubuntu Pro
libmagickcore-6-headers (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
ImageMagick-config-6-SUSE - update to 6.8.8.1-71.192.1
libMagickCore-6_Q16-1-debuginfo - update to 6.8.8.1-71.192.1
ImageMagick-debugsource - update to 6.8.8.1-71.192.1
ImageMagick-config-6-upstream - update to 6.8.8.1-71.192.1
libMagickCore-6_Q16-1 - update to 6.8.8.1-71.192.1
ImageMagick-debuginfo - update to 6.8.8.1-71.192.1
libMagickWand-6_Q16-1 - update to 6.8.8.1-71.192.1
libMagickWand-6_Q16-1-debuginfo - update to 6.8.8.1-71.192.1
libMagickCore-6_Q16-1-debuginfo-32bit - update to 6.8.8.1-71.192.1
ImageMagick - update to 6.8.8.1-71.192.1
perl-PerlMagick-debuginfo - update to 6.8.8.1-71.192.1
perl-PerlMagick - update to 6.8.8.1-71.192.1
libMagick++-6_Q16-3 - update to 6.8.8.1-71.192.1
ImageMagick-devel - update to 6.8.8.1-71.192.1
libMagick++-6_Q16-3-debuginfo - update to 6.8.8.1-71.192.1
libMagickCore-6_Q16-1-32bit - update to 6.8.8.1-71.192.1
libMagick++-devel - update to 6.8.8.1-71.192.1
ImageMagick - update to 6.9.10.97-1.26
ImageMagick-c++ - update to 6.9.12.86-2
ImageMagick - update to 6.9.12.86-2
ImageMagick-debuginfo - update to 6.9.12.86-2
ImageMagick-perl - update to 6.9.12.86-2
ImageMagick-debugsource - update to 6.9.12.86-2
ImageMagick-c++-devel - update to 6.9.12.86-2
ImageMagick-help - update to 6.9.12.86-2
ImageMagick-devel - update to 6.9.12.86-2
ImageMagick - addressed in versions 6.9.12.93-1.el8, 6.9.12.93-1.fc37, 7.1.1.15-1.fc38

• https://github.com/ImageMagick/ImageMagick6/commit/85a370c79afeb45a97842b0959366af5236e9023
• https://bugzilla.redhat.com/show_bug.cgi?id=2214141
• https://seclists.org/oss-sec/2023/q2/223

• Denial of service in ImageMagick
• Ubuntu update for imagemagick
• SUSE update for ImageMagick
• Amazon Linux AMI update for ImageMagick
• Fedora 38 update for ImageMagick
• Fedora 37 update for ImageMagick
• Multiple vulnerabilities in Oracle Solaris third-party software
• Fedora EPEL 8 update for ImageMagick
• openEuler 20.03 LTS SP1 update for ImageMagick
• openEuler 20.03 LTS SP3 update for ImageMagick