PT-2023-3419 · Unknown+3 · Imagemagick+3

Marian Rehak · CVE-2023-2157 · Publicado 2023-05-19 · Atualizado 2025-01-07

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)

Description The issue is related to a heap-based buffer overflow in the ImageMagick package, which can cause the application to crash. This can be exploited by an attacker to disrupt service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

ALT-PU-2023-5309

BDU:2023-03597

CVE-2023-2157

OESA-2023-1330

OESA-2023-1331

OESA-2023-1332

OESA-2023-1333

OPENSUSE-SU-2024:12954-1

Produtos afetados

Alt Linux

Astra Linux

Imagemagick

Red Os

Referências · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2157.json · Exploit
• 🔥 https://github.com/overgrowncarrot1/ImageTragick_CVE-2023-34152 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.11 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2208537 · Correção
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1330 · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1332 · Nota
• https://t.me/cvenotify/51909 · Publicação no Telegram
• https://t.me/cvenotify/106688 · Publicação no Telegram
• https://osv.dev/vulnerability/OESA-2023-1330 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-2157 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-2157 · Nota de Segurança
• https://access.redhat.com/security/cve/cve-2023-2157 · Nota
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-2157 · Aviso do Fabricante