SUSE-SU-2018:0132-1
Vulnerability from csaf_suse - Published: 2018-01-18 10:37 - Updated: 2026-09-20 12:38Summary
Security update for ImageMagick
Severity
Moderate
Notes
Title of the patch: Security update for ImageMagick
Description of the patch: This update for ImageMagick fixes several issues.
These security issues were fixed:
- CVE-2017-12672: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of
service (bsc#1052720).
- CVE-2017-13060: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of
service via a crafted file (bsc#1055065).
- CVE-2017-11724: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c involving the quantum_info and clone_info data
structures (bsc#1051446).
- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion
failure in the function DestroyImage in MagickCore/image.c, which allowed
attackers to cause a denial of service (bsc#1052731).
- CVE-2017-12667: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c (bsc#1052732).
- CVE-2017-13146: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c (bsc#1055323).
- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a
denial of service (OOM) in ReadMATImage() if the size specified for a MAT
Object was larger than the actual amount of data (bsc#1047044)
- CVE-2017-13648: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c (bsc#1055434).
- CVE-2017-11141: Fixed a memory leak vulnerability in the function
ReadMATImage in coders\mat.c that could have caused memory exhaustion via a
crafted MAT file, related to incorrect ordering of a SetImageExtent call
(bsc#1047898).
- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote
attackers to cause a denial of service (memory leak) via a crafted file
(bsc#1050120).
- CVE-2017-12564: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of
service (bsc#1052468).
- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in
coders/mat.c, which allowed attackers to cause a denial of service (assertion
failure) in DestroyImageInfo in image.c (bsc#1052550).
- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,
that could have lead to a memory leak in the function ReadImage in
MagickCore/constitute.c, which allowed attackers to cause a denial of service
(bsc#1052710).
- CVE-2017-14326: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of
service via a crafted file (bsc#1058640).
- CVE-2017-11644: Processesing a crafted file in convert could have lead to a
memory leak in the ReadMATImage() function in coders/mat.c (bsc#1050606).
- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in
coders/mat.c, which could have lead to a denial of service (assertion failure
and application exit) in the DestroyImageInfo function in MagickCore/image.c
(bsc#1055855).
- CVE-2017-14533: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c (bsc#1059751).
- CVE-2017-17881: Fixed a memory leak vulnerability in the function
ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of
service via a crafted MAT image file (bsc#1074123).
- CVE-2017-1000476: Prevent CPU exhaustion in the function ReadDDSInfo in
coders/dds.c, which allowed attackers to cause a denial of service
(bsc#1074610).
- CVE-2017-9409: Fixed a memory leak vulnerability in the function ReadMPCImage
in mpc.c, which allowed attackers to cause a denial of service via a crafted
file (bsc#1042948).
- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not
validate blob sizes, which allowed remote attackers to cause a denial of service
(application crash) or possibly have unspecified other impact via an image
received from stdin (bsc#1049373)
- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in
coders/mpc.c allowed attackers to cause DoS (bsc#1052252)
- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in
coders\mpc.c via crafted file allowing for DoS (bsc#1052771)
- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that
lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c
allowed remote attackers to cause a denial of service via a crafted file
(bsc#1058082)
- CVE-2017-1000445: Added a NUL pointer check in the MagickCore component that
might have lead to denial of service (bsc#1074425).
- CVE-2017-11751: Fixed a memory leak vulnerability in the function
WritePICONImage in coders/xpm.c that allowed remote attackers to cause a denial
of service via a crafted file (bsc#1051412).
- CVE-2017-17680: Fixed a memory leak vulnerability in the function
ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of
service via a crafted xpm image file (bsc#1072902).
- CVE-2017-17882: Fixed a memory leak vulnerability in the function
ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of
service via a crafted XPM image file (bsc#1074122).
- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in
coders/pattern.c (bsc#1074973).
- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in
MagickWand/montage.c (bsc#1074975)
- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in
coders/rla.c (bsc#1074969)
Patchnames: sdksp4-ImageMagick-13422,slessp4-ImageMagick-13422
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
132 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-0:6.4.3.6-7.78.22.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
low
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
132 products, the same list as for
CVE-2017-1000445
Threats
Impact
moderate
References
139 references
Loading 1.4 MB of JSON…
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…