Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-5118

Опубликовано: 10 июн. 2016
Источник: ubuntu
Приоритет: medium
CVSS2: 10
CVSS3: 9.8

Описание

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1.3.24-1
cosmic

not-affected

1.3.24-1
devel

not-affected

1.3.24-1
esm-apps/bionic

not-affected

1.3.24-1
esm-apps/xenial

released

1.3.23-1ubuntu0.1
esm-infra-legacy/trusty

not-affected

1.3.18-1ubuntu3.1
precise

ignored

end of life
precise/esm

DNE

precise was needs-triage
trusty

released

1.3.18-1ubuntu3.1

Показывать по

РелизСтатусПримечание
artful

released

8:6.8.9.9-7ubuntu7
bionic

released

8:6.8.9.9-7ubuntu7
cosmic

released

8:6.8.9.9-7ubuntu7
devel

released

8:6.8.9.9-7ubuntu7
esm-infra-legacy/trusty

not-affected

8:6.7.7.10-6ubuntu3.1
esm-infra/bionic

not-affected

8:6.8.9.9-7ubuntu7
esm-infra/xenial

not-affected

8:6.8.9.9-7ubuntu5.1
precise

released

8:6.6.9.7-5ubuntu3.4
precise/esm

DNE

precise was released [8:6.6.9.7-5ubuntu3.4]
trusty

released

8:6.7.7.10-6ubuntu3.1

Показывать по

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
больше 9 лет назад

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

CVSS3: 9.8
nvd
около 9 лет назад

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

CVSS3: 9.8
debian
около 9 лет назад

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and Im ...

suse-cvrf
около 9 лет назад

Security update for ImageMagick

suse-cvrf
около 9 лет назад

Security update for GraphicsMagick

10 Critical

CVSS2

9.8 Critical

CVSS3