PT-2023-3419 · Unknown+3 · Imagemagick+3

Marian Rehak · Publicado 2023-05-19 · Atualizado 2025-01-07 · CVE-2023-2157

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)

Description The issue is related to a heap-based buffer overflow in the ImageMagick package, which can cause the application to crash. This can be exploited by an attacker to disrupt service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-122

CWE-787

Identificadores relacionados

ALT-PU-2023-5309

BDU:2023-03597

CVE-2023-2157

OESA-2023-1330

OESA-2023-1331

OESA-2023-1332

OESA-2023-1333

OPENSUSE-SU-2024:12954-1

Produtos afetados

Alt Linux

Astra Linux

Imagemagick

Red Os

Referências · 29

• https://osv.dev/vulnerability/OESA-2023-1330 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2023-2157 · Nota
• https://osv.dev/vulnerability/OESA-2023-1331 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-2157 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Aviso do Fabricante
• https://t.me/cvenotify/51909 · Publicação no Telegram
• https://suse.com/security/cve/CVE-2023-2157 · Nota
• https://bdu.fstec.ru/vul/2023-03597 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-2157 · Nota de Segurança
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Aviso do Fabricante
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2208537 · Correção
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1331 · Nota