vulnerability
SUSE: CVE-2016-3718: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | May 5, 2016 | May 7, 2016 | Jul 26, 2024 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
May 5, 2016
Added
May 7, 2016
Modified
Jul 26, 2024
Description
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Solutions
suse-upgrade-graphicsmagicksuse-upgrade-imagemagicksuse-upgrade-imagemagick-config-6-susesuse-upgrade-imagemagick-config-6-upstreamsuse-upgrade-imagemagick-config-7-susesuse-upgrade-imagemagick-config-7-upstreamsuse-upgrade-imagemagick-develsuse-upgrade-libgraphicsmagick2suse-upgrade-libmagick-1suse-upgrade-libmagick-6_q16-3suse-upgrade-libmagick-7_q16hdri4suse-upgrade-libmagick-develsuse-upgrade-libmagickcore-6_q16-1suse-upgrade-libmagickcore-6_q16-1-32bitsuse-upgrade-libmagickcore-7_q16hdri6suse-upgrade-libmagickcore1suse-upgrade-libmagickcore1-32bitsuse-upgrade-libmagickwand-6_q16-1suse-upgrade-libmagickwand-7_q16hdri6suse-upgrade-libmagickwand1suse-upgrade-libmagickwand1-32bitsuse-upgrade-perl-graphicsmagicksuse-upgrade-perl-perlmagick
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.