VDB
BDU%3A2021-05612
BDU%3A2021-05612
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость реализации HTTP- или FTP-протокола консольного графического редактора ImageMagick, позволяющая нарушителю осуществить SSRF-атаку
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, ImageMagick Studio LLC, Red Hat, Inc., Canonical Ltd., Slackware Linux Inc., Oracle Corp. | openSUSE, Debian GNU/Linux, ImageMagick, SUSE Linux Enterprise Debuginfo, Red Hat Enterprise Linux, Ubuntu, OpenSUSE Leap, Slackware, Solaris, Suse Linux Enterprise Server, SUSE Linux Enterprise Software Development Kit, Oracle Linux, Suse Linux Enterprise Desktop, SUSE Manager, SUSE Manager Proxy, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud | |
| Novell Inc., Сообщество свободного программного обеспечения, ImageMagick Studio LLC, Red Hat Inc., Canonical Ltd., Slackware Linux Inc., Oracle Corp. | openSUSE, Debian GNU/Linux, ImageMagick, SUSE Linux Enterprise Debuginfo, Red Hat Enterprise Linux, Ubuntu, OpenSUSE Leap, Slackware, Solaris, Suse Linux Enterprise Server, SUSE Linux Enterprise Software Development Kit, Oracle Linux, Suse Linux Enterprise Desktop, SUSE Manager, SUSE Manager Proxy, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud |
Timeline
- Nov 25, 2021 CVE Published
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog url
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html advisory
- https://access.redhat.com/security/cve/cve-2016-3718 advisory
- http://www.debian.org/security/2016/dsa-3580 advisory
- http://www.openwall.com/lists/oss-security/2016/05/03/18 url
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html advisory
- http://www.securityfocus.com/archive/1/538378/100/0/threaded url
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 advisory
- http://www.ubuntu.com/usn/USN-2990-1 advisory
- https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html advisory
- https://security.gentoo.org/glsa/201611-21 url
- https://www.exploit-db.com/exploits/39767/ url
- https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 advisory
- https://www.imagemagick.org/script/changelog.php advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-3718 url