VDB
BDU%3A2021-05612
BDU%3A2021-05612
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость реализации HTTP- или FTP-протокола консольного графического редактора ImageMagick, позволяющая нарушителю осуществить SSRF-атаку
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, ImageMagick Studio LLC, Red Hat Inc., Canonical Ltd., Slackware Linux Inc., Oracle Corp. | openSUSE, Debian GNU/Linux, ImageMagick, SUSE Linux Enterprise Debuginfo, Red Hat Enterprise Linux, Ubuntu, OpenSUSE Leap, Slackware, Solaris, Suse Linux Enterprise Server, SUSE Linux Enterprise Software Development Kit, Oracle Linux, Suse Linux Enterprise Desktop, SUSE Manager, SUSE Manager Proxy, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud |
Timeline
- Nov 25, 2021 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog url
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html url
- https://access.redhat.com/security/cve/cve-2016-3718 url
- http://www.openwall.com/lists/oss-security/2016/05/03/18 url
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html url
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html url
- http://www.securityfocus.com/archive/1/538378/100/0/threaded url
- http://www.ubuntu.com/usn/USN-2990-1 url
- https://security.gentoo.org/glsa/201611-21 url
- https://www.exploit-db.com/exploits/39767/ url
- https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 url
- https://www.imagemagick.org/script/changelog.php url
- https://nvd.nist.gov/vuln/detail/CVE-2016-3718 url
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html advisory
- http://www.debian.org/security/2016/dsa-3580 advisory
- https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html advisory
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 advisory