{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-03T00:00:00", "descriptions": [{"lang": "en", "value": "The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-04-03T18:06:06", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://access.redhat.com/security/vulnerabilities/2296071"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"}, {"name": "openSUSE-SU-2016:1266", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"}, {"name": "1035742", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1035742"}, {"tags": ["x_refsource_MISC"], "url": "https://imagetragick.com/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588"}, {"name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"}, {"name": "SUSE-SU-2016:1301", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"}, {"name": "openSUSE-SU-2016:1326", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"}, {"name": "USN-2990-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/USN-2990-1"}, {"name": "openSUSE-SU-2016:1261", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"}, {"name": "20160513 May 2016 - HipChat Server - Critical Security Advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"}, {"name": "39767", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/39767/"}, {"name": "SUSE-SU-2016:1260", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"}, {"tags": ["x_refsource_MISC"], "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"}, {"name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"}, {"name": "DSA-3746", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2016/dsa-3746"}, {"name": "GLSA-201611-21", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201611-21"}, {"name": "SUSE-SU-2016:1275", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"}, {"name": "SSA:2016-132-01", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"], "url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.imagemagick.org/script/changelog.php"}, {"name": "39791", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/39791/"}, {"name": "DSA-3580", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2016/dsa-3580"}, {"name": "89848", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/89848"}, {"name": "RHSA-2016:0726", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"}, {"name": "VU#250519", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "https://www.kb.cert.org/vuls/id/250519"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T00:03:34.492Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://access.redhat.com/security/vulnerabilities/2296071"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"}, {"name": "openSUSE-SU-2016:1266", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"}, {"name": "1035742", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1035742"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://imagetragick.com/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588"}, {"name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"}, {"name": "SUSE-SU-2016:1301", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"}, {"name": "openSUSE-SU-2016:1326", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"}, {"name": "USN-2990-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-2990-1"}, {"name": "openSUSE-SU-2016:1261", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"}, {"name": "20160513 May 2016 - HipChat Server - Critical Security Advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"}, {"name": "39767", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/39767/"}, {"name": "SUSE-SU-2016:1260", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"}, {"name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"}, {"name": "DSA-3746", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2016/dsa-3746"}, {"name": "GLSA-201611-21", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201611-21"}, {"name": "SUSE-SU-2016:1275", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"}, {"name": "SSA:2016-132-01", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"], "url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.imagemagick.org/script/changelog.php"}, {"name": "39791", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/39791/"}, {"name": "DSA-3580", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2016/dsa-3580"}, {"name": "89848", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/89848"}, {"name": "RHSA-2016:0726", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"}, {"name": "VU#250519", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "https://www.kb.cert.org/vuls/id/250519"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation"}]}], "affected": [{"vendor": "imagemagick", "product": "imagemagick", "cpes": ["cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.9.3-9", "versionType": "custom"}]}, {"vendor": "imagemagick", "product": "imagemagick", "cpes": ["cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.0.0-0", "status": "affected"}]}, {"vendor": "imagemagick", "product": "imagemagick", "cpes": ["cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.0.1-0", "status": "affected"}]}, {"vendor": "canonical", "product": "ubuntu_linux", "cpes": ["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "12.04", "status": "affected"}, {"version": "14.04", "status": "affected"}, {"version": "15.10", "status": "affected"}, {"version": "16.04", "status": "affected"}]}, {"vendor": "debian", "product": "debian_linux", "cpes": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.0", "status": "affected"}, {"version": "9.0", "status": "affected"}]}, {"vendor": "opensuse", "product": "opensuse", "cpes": ["cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "13.2", "status": "affected"}]}, {"vendor": "opensuse", "product": "leap", "cpes": ["cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "42.1", "status": "affected"}]}, {"vendor": "suse", "product": "suse_linux_enterprise_server", "cpes": ["cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "12", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-07T03:55:20.670421Z", "id": "CVE-2016-3714", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2024-09-09", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-09T16:20:23.386Z"}, "timeline": [{"time": "2024-09-09T00:00:00+00:00", "lang": "en", "value": "CVE-2016-3714 added to CISA KEV"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2016-3714", "datePublished": "2016-05-05T18:00:00", "dateReserved": "2016-03-30T00:00:00", "dateUpdated": "2024-09-09T16:20:23.386Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://access.redhat.com/security/vulnerabilities/2296071", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html", "name": "openSUSE-SU-2016:1266", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.securitytracker.com/id/1035742", "name": "1035742", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"]}, {"url": "https://imagetragick.com/", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/03/13", "name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html", "name": "SUSE-SU-2016:1301", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html", "name": "openSUSE-SU-2016:1326", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.ubuntu.com/usn/USN-2990-1", "name": "USN-2990-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html", "name": "openSUSE-SU-2016:1261", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded", "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"]}, {"url": "https://www.exploit-db.com/exploits/39767/", "name": "39767", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html", "name": "SUSE-SU-2016:1260", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/03/18", "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"]}, {"url": "http://www.debian.org/security/2016/dsa-3746", "name": "DSA-3746", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"]}, {"url": "https://security.gentoo.org/glsa/201611-21", "name": "GLSA-201611-21", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html", "name": "SUSE-SU-2016:1275", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568", "name": "SSA:2016-132-01", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"]}, {"url": "https://www.imagemagick.org/script/changelog.php", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://www.exploit-db.com/exploits/39791/", "name": "39791", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"]}, {"url": "http://www.debian.org/security/2016/dsa-3580", "name": "DSA-3580", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"]}, {"url": "http://www.securityfocus.com/bid/89848", "name": "89848", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html", "name": "RHSA-2016:0726", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://www.kb.cert.org/vuls/id/250519", "name": "VU#250519", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"]}, {"url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T00:03:34.492Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2016-3714", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-07T03:55:20.670421Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2024-09-09", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}], "affected": [{"cpes": ["cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*"], "vendor": "imagemagick", "product": "imagemagick", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "6.9.3-9"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*"], "vendor": "imagemagick", "product": "imagemagick", "versions": [{"status": "affected", "version": "7.0.0-0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*"], "vendor": "imagemagick", "product": "imagemagick", "versions": [{"status": "affected", "version": "7.0.1-0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"], "vendor": "canonical", "product": "ubuntu_linux", "versions": [{"status": "affected", "version": "12.04"}, {"status": "affected", "version": "14.04"}, {"status": "affected", "version": "15.10"}, {"status": "affected", "version": "16.04"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"], "vendor": "debian", "product": "debian_linux", "versions": [{"status": "affected", "version": "8.0"}, {"status": "affected", "version": "9.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"], "vendor": "opensuse", "product": "opensuse", "versions": [{"status": "affected", "version": "13.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"], "vendor": "opensuse", "product": "leap", "versions": [{"status": "affected", "version": "42.1"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*"], "vendor": "suse", "product": "suse_linux_enterprise_server", "versions": [{"status": "affected", "version": "12"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-09T14:26:59.413Z"}, "timeline": [{"lang": "en", "time": "2024-09-09T00:00:00+00:00", "value": "CVE-2016-3714 added to CISA KEV"}]}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-03T00:00:00", "references": [{"url": "https://access.redhat.com/security/vulnerabilities/2296071", "tags": ["x_refsource_CONFIRM"]}, {"url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog", "tags": ["x_refsource_CONFIRM"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html", "name": "openSUSE-SU-2016:1266", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.securitytracker.com/id/1035742", "name": "1035742", "tags": ["vdb-entry", "x_refsource_SECTRACK"]}, {"url": "https://imagetragick.com/", "tags": ["x_refsource_MISC"]}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588", "tags": ["x_refsource_CONFIRM"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/03/13", "name": "[oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html", "name": "SUSE-SU-2016:1301", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html", "name": "openSUSE-SU-2016:1326", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.ubuntu.com/usn/USN-2990-1", "name": "USN-2990-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html", "name": "openSUSE-SU-2016:1261", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded", "name": "20160513 May 2016 - HipChat Server - Critical Security Advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ"]}, {"url": "https://www.exploit-db.com/exploits/39767/", "name": "39767", "tags": ["exploit", "x_refsource_EXPLOIT-DB"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html", "name": "SUSE-SU-2016:1260", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate", "tags": ["x_refsource_MISC"]}, {"url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html", "tags": ["x_refsource_CONFIRM"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/05/03/18", "name": "[oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714", "tags": ["mailing-list", "x_refsource_MLIST"]}, {"url": "http://www.debian.org/security/2016/dsa-3746", "name": "DSA-3746", "tags": ["vendor-advisory", "x_refsource_DEBIAN"]}, {"url": "https://security.gentoo.org/glsa/201611-21", "name": "GLSA-201611-21", "tags": ["vendor-advisory", "x_refsource_GENTOO"]}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html", "name": "SUSE-SU-2016:1275", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568", "name": "SSA:2016-132-01", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"]}, {"url": "https://www.imagemagick.org/script/changelog.php", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://www.exploit-db.com/exploits/39791/", "name": "39791", "tags": ["exploit", "x_refsource_EXPLOIT-DB"]}, {"url": "http://www.debian.org/security/2016/dsa-3580", "name": "DSA-3580", "tags": ["vendor-advisory", "x_refsource_DEBIAN"]}, {"url": "http://www.securityfocus.com/bid/89848", "name": "89848", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html", "name": "RHSA-2016:0726", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://www.kb.cert.org/vuls/id/250519", "name": "VU#250519", "tags": ["third-party-advisory", "x_refsource_CERT-VN"]}, {"url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\""}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2019-04-03T18:06:06"}}}, "cveMetadata": {"cveId": "CVE-2016-3714", "state": "PUBLISHED", "dateUpdated": "2024-09-09T16:20:23.386Z", "dateReserved": "2016-03-30T00:00:00", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2016-05-05T18:00:00", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{"cisaActionDue": "2024-09-30", "cisaExploitAdd": "2024-09-09", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "ImageMagick Improper Input Validation Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*", "matchCriteriaId": "F89D4030-2804-4CFE-8DC1-66BC99720860", "versionEndIncluding": "6.9.3-9", "vulnerable": true}, {"criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*", "matchCriteriaId": "3B7CCC6B-C66E-48E2-BA1E-CBF6421B4FEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*", "matchCriteriaId": "693C9F8F-A8C1-4D06-8F31-E085E16E701C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*", "matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*", "matchCriteriaId": "9C649194-B8C2-49F7-A819-C635EE584ABF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\""}, {"lang": "es", "value": "Los codificadores (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN y (8) PLT en ImageMagick en versiones anteriores a 6.9.3-10 y 7.x en versiones anteriores a 7.0.1-1 permiten a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de metacaracteres shell en una imagen manipulada, tambi\u00e9n conocido como \"ImageTragick\"."}], "id": "CVE-2016-3714", "lastModified": "2024-11-21T02:50:33.420", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2016-05-05T18:59:03.273", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3580"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3746"}, {"source": "[email protected]", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"}, {"source": "[email protected]", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/89848"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1035742"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2990-1"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/vulnerabilities/2296071"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://imagetragick.com/"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201611-21"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39767/"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39791/"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://www.imagemagick.org/script/changelog.php"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/250519"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2016-0726.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3580"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3746"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/13"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2016/05/03/18"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/538378/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/89848"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1035742"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-2990-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/vulnerabilities/2296071"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://imagetragick.com/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201611-21"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39767/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/39791/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.imagemagick.org/script/changelog.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/250519"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2016:0726", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "ImageMagick-0:6.7.2.7-4.el6_7", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2016-05-09T00:00:00Z"}, {"advisory": "RHSA-2016:0726", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "ImageMagick-0:6.7.8.9-13.el7_2", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2016-05-09T00:00:00Z"}], "bugzilla": {"description": "ImageMagick: Insufficient shell characters filtering", "id": "1332492", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1332492"}, "csaw": true, "cvss": {"cvss_base_score": "6.8", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "status": "verified"}, "cvss3": {"cvss3_base_score": "8.4", "cvss3_scoring_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-20", "details": ["The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"", "It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application."], "mitigation": {"lang": "en:us", "value": "Details can be found under the resolve tab at https://access.redhat.com/security/vulnerabilities/2296071\nRed Hat Enterprise Linux 6 and 7\n================================\nAs a workaround the /etc/ImageMagick/policy.xml file can be edited to disable processing of MVG, HTTPS, HTTP, URL, FTP, EPHEMERAL, MSL, LABEL, TEXT, SHOW, WIN and PLT commands within image files, simply add the following lines:\n<policy domain=\"coder\" rights=\"none\" pattern=\"EPHEMERAL\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"HTTPS\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"HTTP\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"URL\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"FTP\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"MVG\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"MSL\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"TEXT\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"LABEL\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"SHOW\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"WIN\" />\n<policy domain=\"coder\" rights=\"none\" pattern=\"PLT\" />\n<policy domain=\"path\" rights=\"none\" pattern=\"@*\" />\nwithin the policy map stanza:\n<policymap>\n...\n</policymap>\nRed Hat Enterprise Linux 5\n==========================\nIn the following folders:\n/usr/lib64/ImageMagick-6.2.8/modules-Q16/coders/ (64bit package)\nor\n/usr/lib/ImageMagick-6.2.8/modules-Q16/coders/ (32bit package)\nRename the following files:\n* mvg.so to mvg.so.bak\n* msl.so to msl.so.bak\n* label.so to label.so.bak"}, "name": "CVE-2016-3714", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "ImageMagick", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/a:redhat:openshift:2", "fix_state": "Affected", "package_name": "ImageMagick", "product_name": "Red Hat OpenShift Enterprise 2"}], "public_date": "2016-05-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-3714\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-3714\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog"], "threat_severity": "Important"}