Bug 2185714 (CVE-2023-1906)
Summary: | CVE-2023-1906 ImageMagick: heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | TEJ RATHI <trathi> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED WONTFIX | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | unspecified | CC: | abhamvoguddunahirahe, actiongamesking10, agecalculatorpage, akhmedsajid3, asadrafi590, ashleydurack041, as.stillbon, auroraamelia786, bascombecurrey479, bdettelb, bethebloggerguru, digitalarinaofficial, drieden, ehabmohsen66, evawillms183, goharclients03, goharearn03, goharseo03, goharshah.ly, grahamlogan429, hamzadesktop5, ikanias, itsmrsimon3500, jaifowler5, jary, jhorak, jrice47yb, jwakely, lunaharper750, mvoucherwork, orborneee, pakistanuser80, powerdirectormodapk, rravi, rwimberleyson52, shameil065, tetoyax441, thegeometrydashapk.info, thestumbleguys1, tohughes, virtualmaster919, willyjim999, zeeshanwrites1 |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | Flags: | jary:
needinfo-
|
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | ImageMagick 6.9.12-84, ImageMagick 7.1.1-6 | Doc Type: | If docs needed, set a value |
Doc Text: |
A heap-based buffer overflow was found in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. This issue could allow an attacker to pass a specially crafted file to convert, triggering an out-of-bounds read error, which could cause an application to crash and result in a denial of service.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2023-04-11 21:05:08 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 2185715, 2185716 | ||
Bug Blocks: | 2185712 |
Description
TEJ RATHI
2023-04-11 04:38:58 UTC
Created ImageMagick tracking bugs for this issue: Affects: epel-8 [bug 2185716] Affects: fedora-all [bug 2185715] This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2023-1906 RHEL-6,7 are not affected as vulnerable code is not present in our code-base. Carx street mod apk iOS</a> also offers unlimited in-game currency, allowing you to upgrade your cars, purchase new parts, and fine-tune your racing machines without any limitations. https://carxstreetapk.com/carx-street-mod-apk-ios/ Our aim is to provide you with inspiration for your next family name using website https://foxynamer.com/. That’s why we have dedicated ourselves to making the naming process easier, more enjoyable, and stress-free. If you're looking for an adrenaline-pumping way to spend your free time, look no further than CarX Street mod apk - the ultimate racing game experience! Get ready to be thrilled by intense street racing action, stunning graphics, and realistic car physics. Once you start playing, you won't be able to resist the urge to conquer the streets and become the ultimate racing champion. So, what are you waiting for? https://apkdede.com/carx-street-mod-apk/ Your issue resolved or not? https://tiktokdownloads.online/ Join telegram Group Links Pakistan Girls where there are hundreds of active friendly members.https://telgrouplink.com Join Active Tamil Girls' telegram group links and share whatever you want.https://telelinkshub.com There are many active Tamil single girl telegram group links for you to join.https://telegrouplinko.com Here is the fastest FBDownloader which provides you with an outstanding link.https://fbdownloader.fun Here is the fastest downloading Carx Racing Games which provides premium features free of cost. Visit the link. https://carxstreetapkpro.com/carx-street-mod-apk/ I hope this is an error that is fixed as quickly as possible https://super-mario.io In this modern world, everyone try to earn online money. Even online games like Milky Way Casino games provide real money for the users. Visit this URL and enjoy to play and start to earn, https://milkywaycasinoapk.pro he character can run on the walls and ceiling of the tunnels. https://run3online.pro If you're loving to listen your favorite songs and download free of cost. https://www.ressoapp.in Capcut is an amazing video editing app that can help you convert you video content into professional looking videos very easily. With a basic knowledge anyone can use Capcut MoD APK https://capcutmods.org/ with its user friendly interface. Stumble Guys is a multiplayer battle royale game where players have to cross different obstacle courses to reach the finish line. What if i give you a popular stumble guys mod apk unlimited money and gems to make the competition easier for you. Check out the link below, https://thestumbleguys.com/stumble-guys-mod-apk-6/ Join the Latest Active WhatsApp group links to get the latest entertainment & fun content. https://activewhatslink.com (In reply to Jai87 from comment #17) > Capcut is an amazing video editing app that can help you convert you video > content into professional looking videos very easily. With a basic knowledge > anyone can use Capcut MoD APK https://capcutmods.org/ with its user friendly > interface. If you are feeling bored then join these Join Latest Active WhatsApp group links for fun.https://whatslinko.com We have collected many Join Latest Active WhatsApp group links for you to get interesting material. https://whatslinkhub.com There are many active Join Latest WhatsApp group links for you to join.https://activelinko.com It hurts when someone precious in our lives, leaves us. Great blog. Thank you for sharing. I wanted some ideas to add to my webpage Tierkrematorium Balingen. Thank you for sharing. You can check my webpage here: https://schoenhalde.de As we all know MLBB is a famous game. If you love to play this game you can also download all MLBB injectors to enhance your gaming experience and unlock all premium features. http://mlinjectors.com/ Join Elephant Names https://foxynamer.com/elephant-names In the rhythmic symphony of swift maneuvers and strategic finesse, lacrosse ignites the field with an unparalleled fervor, echoing the passion found at the heart of the game. Explore the essence of this captivating sport at the epicenter of excellence https://www.laxfury.com/ where the spirit of lacrosse finds its fiery home. Using a <a href="https://fontchanger.info/japanese-font-generator">Number Fonts Copy Paste</a> is a fun and creative way to make your posts or stories stand out and catch the attention of your followers. lovely information, I really love your content. More information can also be found at checkout at https://xmanagerapp.net Download and play 3 Patti Blue online casino to earn real money. One of the exciting and stunning game for the casino lovers. Visit for free download https://3pattiblueapk.pro/ Hey, foodies enjoy the delicious flavors on the Sonic menu! The best things from Sonic are a wide range of tasty options from classic to new creations. Find your perfect meal today! Our diverse range of menu are designed to satisfy your craving.https://sonic-menu.org/ Introducing the McDonald’s Saver Menu UK – your gateway to delicious, budget-friendly choices. Explore an array of wallet-friendly options without compromising on taste. Discover great value at McDonald’s today! https://mcdsmenuuk.com/ Feel free to personalize these or combine words to create a unique name for your private Snapchat story!https://privatestorynames.info/ Stumble Guys is a multiplayer battle royale game where players have to cross different obstacle courses to reach the finish line. What if i give you a popular stumble guys mod apk unlimited money and gems to make the competition easier for you. Check out the link below, https://actiongamesking.com/stumble-guys-mod-apk-6/ <a href="thegeometrydashapk.com">Geometry Dash for Android</a> is one of the most addictive game wit its fast paced game combines with by amazing beats you will simply fall in love with it. I suggest everyone to give a chance to Geometry Dash for Android devices at least once and they will surely be amazed by its addictive gameplay. Download this amazing Geometry Dash game from this website: https://thegeometrydashapk.com/ In this gaming world, everyone wants to play their favorite game according to their preferences. Most of us play online casino games for earning real, visit this website and enjoy to play, https://rummygoldsapk.pro/ Protect Your digital data from malware, viruses, adware, trojan and spyware Threats by using most powerful TotalAV Antivirus software. It is completely professional and 100% secure. It is an highly advanced antivirus software designed to protect your data of Windows, Mac, Android and iOS. The software provide real time protection while your device access any file. It is also helpful to block pesky ads that invades your screen. https://www.stillbonsoftware.com/totalav/ Se quiser um texto sofisticado para seu apelido em jogos, você pode conferir fontes para nick lindas. https://geradorde.online/fontes-de-letras/para-nick/ <a href="https://geometrydash.pro/">Geometry Dash For Android</a> is a simple yet addictive game that combines geometric shapes, rhythmic challenges, and an electrifying soundtrack. The objective is straightforward: guide a square-shaped icon through various obstacles by tapping the screen. The catch is that each level is synchronized with a pulsating soundtrack, requiring players to time their taps perfectly to navigate through the hurdles. The levels become progressively more challenging, testing the player's reflexes and precision. <a href="https://geometrydash.pro/">Geometry Dash For Android</a> is a simple yet addictive game that combines geometric shapes, rhythmic challenges, and an electrifying soundtrack. The objective is straightforward: guide a square-shaped icon through various obstacles by tapping the screen. The catch is that each level is synchronized with a pulsating soundtrack, requiring players to time their taps perfectly to navigate through the hurdles. The levels become progressively more challenging, testing the player's reflexes and precision. (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to willyjim999 from comment #36) > In this gaming world, everyone wants to play their favorite game according > to their preferences. Most of us play online casino games for earning real, > visit this website and enjoy to play, https://rummygoldsapk.pro/ (In reply to totalav from comment #37) > Protect Your digital data from malware, viruses, adware, trojan and spyware > Threats by using most powerful TotalAV Antivirus software. It is completely > professional and 100% secure. It is an highly advanced antivirus software > designed to protect your data of Windows, Mac, Android and iOS. The software > provide real time protection while your device access any file. It is also > helpful to block pesky ads that invades your screen. > https://www.stillbonsoftware.com/totalav/ Best age calculator https://www.agecalculator.page/ https://www.agecalculator.page/2021/04/age-calculator.html https://www.agecalculator.page/2023/10/pearson-age-calculator.html https://www.agecalculator.page/2023/10/chronological-age-calculator.html https://www.agecalculator.page/p/sitemap.html Loklok is a streaming app. On this streaming app, you can find a massive collection of web series, movies, and even anime content. You can spend your leisure time with content available on the app. It provides a great way to spend your time. Visit: https://www.loklokapk.io/ Amazing https://www.mvouchercodes.com This comment was flagged a spam, view the edit history to see the original text if required. I have issue on website https://thegeometrydash.com/ my pages are not indexing on google search console please help me to fix this issue on my gaming website. Best app to play online games to earn money. https://3pattiblue.download/ Efficient ventilation is a crucial aspect of any grill gazebo, and the Saxony model doesn't disappoint. Equipped with smart ventilation systems, it effectively manages smoke, keeping the cooking area comfortable and reducing the risk of unpleasant odors lingering in the air. https://askgazebo.com/review/saxony-grill-gazebo-review/ Shabakti TV is a streaming app. On this streaming app, you can find a large collection of web series, movies, and even anime content. You can spend your leisure time with the content available on the app. It provides a great way to spend your time. Visit: https://www.shabakatytv.com/ Do you want to share your favorite videos with your friends using the Upstreaming App? If yes then you can do it through this WhatsApp. Because plain WhatsApp doesn't allow you to share videos with your friends but you can do it in WhatsApp GB. Visit: https://www.wagbapk.io/ This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. Thanks for sharing it<a href="https://vidmatehub.in/">.</a> amazing one please visit - https://vegassweeps.pro/ Thanks for this information!! Also, visit https://haileystreasureadventureapk.com/haileys-treasure-adventure-pc/. FIFA Mobile Mod APK is one of the best game that provide players unlimited money, coins, gems, and many more without any cost.https://fifamobileapkmod.com/ It's crucial to stay vigilant against vulnerabilities like the heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c, as seen in CVE-2023-1906 for ImageMagick. While this issue has been addressed in ImageMagick versions 6.9.12-84 and 7.1.1-6, it highlights the importance of keeping software up-to-date and following security best practices. Make sure to update your installations and stay informed about security advisories to protect your systems against potential threats. I have faced the same issue while creating my <a href="https://geometryspot.online/" rel="external">Gaming</a> site. The heap-based buffer overflow issue in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c, as documented in CVE-2023-1906, is a serious vulnerability that could allow an attacker to cause a denial of service by triggering an out-of-bounds read error. It's important to note that this issue has been addressed in ImageMagick versions 6.9.12-84 and 7.1.1-6. To mitigate the risk associated with this vulnerability, users are strongly advised to update their ImageMagick installations to the latest patched versions. Additionally, it's recommended to follow security best practices, such as regularly updating software and monitoring for security advisories, to protect systems from potential threats. For more information and updates, please refer to the https://geometryspot.online This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. This comment was flagged a spam, view the edit history to see the original text if required. It's commendable to see the collaborative effort in diagnosing and resolving this issue. With cybersecurity threats evolving rapidly, proactive measures like this are essential in safeguarding digital infrastructures. In the context of enhancing cybersecurity resilience, it's imperative for organizations to prioritize continuous monitoring and patching processes. By staying vigilant and responsive to such vulnerabilities, we can mitigate risks and ensure the integrity of our systems. For further insights into cybersecurity best practices and strategies, feel free to visit Digitology.co. Our platform offers valuable resources and expertise to help navigate the ever-changing landscape of digital security. Stay informed, stay secure! https://Digitology.co |