Published: 05/07/2019 Updated: 02/03/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

It exists that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick 7.0.8-50
canonical ubuntu linux 18.04
canonical ubuntu linux 19.04
canonical ubuntu linux 19.10
canonical ubuntu linux 16.04
debian debian linux 9.0
debian debian linux 10.0
opensuse leap 15.0
opensuse leap 15.1

Debian Bug report logs - #931447 imagemagick: CVE-2019-13308 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 5 Jul 2019 09:45:01 UTC Severity: important Tags: securit ...

Several security issues were fixed in ImageMagick ...

This update fixes multiple vulnerabilities in Imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed image files are processed For the stable distribution (buster), these problems have been fixed ...

Impact: Important Public Date: 2019-07-16 CWE: CWE-119 Bugzilla: 1730342: CVE-2019-13308 ImageMagick: I ...

CWE-787 https://github.com/ImageMagick/ImageMagick/commit/61135001a625364e29bdce83832f043eebde7b5a https://github.com/ImageMagick/ImageMagick6/commit/19651f3db63fa1511ed83a348c4c82fa553f8d01 https://github.com/ImageMagick/ImageMagick/issues/1595 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html https://usn.ubuntu.com/4192-1/https://www.debian.org/security/2020/dsa-4712 https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931447 https://usn.ubuntu.com/4192-1/https://nvd.nist.gov

CVE-2019-13308

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect