PT-2017-6403 · Imagemagick+1 · Imagemagick+1

Published 2016-07-06 · Updated 2024-11-04 · CVE-2014-9852

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)

Description The issue in ImageMagick allows remote attackers to have an unspecified impact via unspecified vectors due to the re-use of objects after they have been destroyed in distribute-cache.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2014-9852

OPENSUSE-SU-2016_1748-1

OPENSUSE-SU-2016_1833-1

SUSE-SU-2016:1784-1

Affected Products

Imagemagick

Suse

References · 239

• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/06/02/13 · Patch
• https://ubuntu.com/security/CVE-2014-9852 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9852 · Vendor Advisory
• https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=37ec7d53dcb99fbd1f5c33442594d5e279630563 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00621 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1784-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-9852 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1343512 · Patch
• https://bdu.fstec.ru/vul/2017-00618 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-9852 · Security Note
• https://bdu.fstec.ru/vul/2017-00619 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9852 · Vendor Advisory