Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Ubuntu 16.04 ESM USN-5335-1 Critical: ImageMagick DoS Threat

ubuntu
Calendar Grey March 21, 2022
Dist Ubuntu Esm H88
Multiple vulnerabilities in ImageMagick have been addressed through security advisories on Ubuntu. Find details on the identified flaws and the necessary steps for updating.
Several security issues were fixed in ImageMagick.

Summary

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

It was discovered that ImageMagick incorrectly handled certain values

when processing XPM image data or large images. If a user or automated

system using ImageMagick were tricked into opening a specially crafted

image, an attacker could exploit this to cause a denial of service or

possibly execute code with the privileges of the user invoking the program.

(CVE-2020-19667, CVE-2017-13144)

Suhwan Song discovered that ImageMagick incorrectly handled memory

when processing PNG,PALM,MIFF image data. If a user or automated system

using ImageMagick were tricked into opening a specially crafted image,

an attacker could exploit this to cause a denial of service or possibly

execute code with the privileges of the user invoking the program.

(CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)

Suhwan Song discovered that ImageMagick incorrect...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu image processing imagemagick

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  imagemagick                     8:6.8.9.9-7ubuntu5.16+esm2
  imagemagick-6.q16               8:6.8.9.9-7ubuntu5.16+esm2
  imagemagick-common              8:6.8.9.9-7ubuntu5.16+esm2
  libimage-magick-perl            8:6.8.9.9-7ubuntu5.16+esm2
  libimage-magick-q16-perl        8:6.8.9.9-7ubuntu5.16+esm2
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu5.16+esm2
  libmagick++-6.q16-dev           8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-6-arch-config     8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-6-headers         8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-6.q16-dev         8:6.8.9.9-7ubuntu5.16+esm2
  libmagickcore-dev               8:6.8.9.9-7ubuntu5.16+esm2
  libmagickwand-6.q16-2           8:6.8.9.9-7ubuntu5.16+esm2
  libmagickwand-6.q16-dev         8:6.8.9.9-7ubuntu5.16+esm2
  perlmagick                      8:6.8.9.9-7ubuntu5.16+esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5335-1

CVE-2017-13144, CVE-2020-19667, CVE-2020-25664, CVE-2020-25665,

CVE-2020-25674, CVE-2020-25676, CVE-2020-27750, CVE-2020-27753,

CVE-2020-27760, CVE-2020-27762, CVE-2020-27766, CVE-2020-27770,

CVE-2021-20176, CVE-2021-20241, CVE-2021-20243

Severity
critical
Lowest
Low
Medium
High
Critical

March 18, 2022

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu image processing imagemagick

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.