The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1237 advisory.

    [6.7.2.7-5]
    - Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. (CVE-2016-5118)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that ImageMagick did not properly     sanitize certain input before using it to invoke     processes. A remote attacker could create a specially     crafted image that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would lead to arbitrary     execution of shell commands with the privileges of the     user running the application.(CVE-2016-5118)

  - It was discovered that ImageMagick did not properly     sanitize certain input before passing it to the gnuplot     delegate functionality. A remote attacker could create     a specially crafted image that, when processed by an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities, would lead to     arbitrary execution of shell commands with the     privileges of the user running the application.
    (CVE-2016-5239)

  - Multiple flaws have been discovered in ImageMagick. A     remote attacker could, for example, create specially     crafted images that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would result in a memory     corruption and, potentially, execution of arbitrary     code, a denial of service, or an application crash.
    (CVE-2015-8896, CVE-2015-8895, CVE-2016-5240,     CVE-2015-8897, CVE-2015-8898)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for GraphicsMagick fixes the following issues :

  - a possible shell execution attack was fixed. if the     first character of an input filename for 'convert' was a     '|' then the remainder of the filename was passed to the     shell (CVE-2016-5118, boo#982178)

  - Maliciously crafted pnm files could crash GraphicsMagick     (CVE-2014-9805, [boo#983752])

  - Prevent overflow in rle files (CVE-2014-9846,     boo#983521)

  - Fix a double free in pdb coder (CVE-2014-9807,     boo#983794)

  - Fix a possible crash due to corrupted xwd images     (CVE-2014-9809, boo#983799)

  - Fix a possible crash due to corrupted wpg images     (CVE-2014-9815, boo#984372)

  - Fix a heap buffer overflow in pdb file handling     (CVE-2014-9817, boo#984400)

  - Fix a heap overflow in xpm files (CVE-2014-9820,     boo#984150)

  - Fix a heap overflow in pict files (CVE-2014-9834,     boo#984436)

  - Fix a heap overflow in wpf files (CVE-2014-9835,     CVE-2014-9831, boo#984145, boo#984375)

  - Additional PNM sanity checks (CVE-2014-9837, boo#984166)

  - Fix a possible crash due to corrupted dib file     (CVE-2014-9845, boo#984394)

  - Fix out of bound in quantum handling (CVE-2016-7529,     boo#1000399)

  - Fix out of bound access in xcf file coder     (CVE-2016-7528, boo#1000434)

  - Fix handling of corrupted lle files (CVE-2016-7515,     boo#1000689)

  - Fix out of bound access for malformed psd file     (CVE-2016-7522, boo#1000698)

  - Fix out of bound access for pbd files (CVE-2016-7531,     boo#1000704)

  - Fix out of bound access in corrupted wpg files     (CVE-2016-7533, boo#1000707)

  - Fix out of bound access in corrupted pdb files     (CVE-2016-7537, boo#1000711)

  - BMP Coder Out-Of-Bounds Write Vulnerability     (CVE-2016-6823, boo#1001066)

  - SGI Coder Out-Of-Bounds Read Vulnerability     (CVE-2016-7101, boo#1001221)

  - Divide by zero in WriteTIFFImage (do not divide by zero     in WriteTIFFImage, boo#1002206)

  - Buffer overflows in SIXEL, PDB, MAP, and TIFF coders     (fix buffer overflow, boo#1002209)

  - 8BIM/8BIMW unsigned underflow leads to heap overflow     (CVE-2016-7800, boo#1002422)

  - wpg reader issues (CVE-2016-7996, CVE-2016-7997,     boo#1003629)

  - Mismatch between real filesize and header values     (CVE-2016-8684, boo#1005123)

  - Stack-buffer read overflow while reading SCT header     (CVE-2016-8682, boo#1005125)

  - Check that filesize is reasonable compared to the header     value (CVE-2016-8683, boo#1005127)

  - Memory allocation failure in AcquireMagickMemory     (CVE-2016-8862, boo#1007245)

  - heap-based buffer overflow in IsPixelGray     (CVE-2016-9556, boo#1011130)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2990-1 advisory.

    Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly sanitized untrusted input. A remote     attacker could use these issues to execute arbitrary code. These issues are known as ImageTragick. This     update disables problematic coders via the /etc/ImageMagick-6/policy.xml configuration file. In certain     environments the coders may need to be manually re-enabled after making sure that ImageMagick does not     process untrusted input. (CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718)

    Bob Friesenhahn discovered that ImageMagick allowed injecting commands via an image file or filename. A     remote attacker could use this issue to execute arbitrary code. (CVE-2016-5118)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
91641	Oracle Linux 6 / 7 : ImageMagick (ELSA-2016-1237)	Nessus	Oracle Linux Local Security Checks	2016/6/17	2024/11/1	critical
92005	F5 Networks BIG-IP : GraphicsMagick vulnerability (K82747025)	Nessus	F5 Networks Local Security Checks	2016/7/12	2019/1/4	critical
99792	EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2016-1029)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical
95704	openSUSE Security Update : GraphicsMagick (openSUSE-2016-1430)	Nessus	SuSE Local Security Checks	2016/12/12	2026/1/14	critical
91450	Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-2990-1)	Nessus	Ubuntu Local Security Checks	2016/6/3	2025/3/14	critical

検出

プラグインの検索

critical

critical

critical

critical

critical