The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1…
Priority HIGH 82Exploited in the wildCWE-918Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 14 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Why it matters now
Exploitation Active In CISA KEV since 2021-11-03CISA due date 2022-05-03
EPSS 0.7565 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Partial Red Hat: 1 advisoryRed Hat: 14 fixed, 2 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 84
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* | 6.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:* | 6.0_s390x | Vulnerable | Red Hat |
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:* Versions 6.0_s390x Vulnerable ·Red Hat
Show 74 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* | 7.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:* | 6.7_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:* | 7.2_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:* | 7.3_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:* | 7.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:* | 7.5_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:* | 7.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:* | 7.7_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:* | 6.0_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:* | 7.0_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:* | 6.7_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:* | 7.2_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:* | 7.3_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:* | 7.4_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:* | 7.5_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:* | 7.6_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:* | 7.7_ppc64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:* | 7.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:* | 7.2_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:* | 7.3_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:* | 7.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:* | 7.5_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:* | 7.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:* | 7.7_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:* | 6.7z | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* | before 6.9.3-10 | Vulnerable | ImageMagick |
| cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:* | 7.0.0-0 | Vulnerable | ImageMagick |
| cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:* | 7.0.1-0 | Vulnerable | ImageMagick |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* | 15.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* | 6 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* | 7 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:* | 10 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* | 11.3 | Vulnerable | Oracle |
| cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:* | 11 sp2 | Vulnerable | SUSE |
| cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:* | 5 | Vulnerable | SUSE |
| cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* | 42.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* | 13.2 | Vulnerable | openSUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:* | 12 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* | 11 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:* | 11 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:* | 12 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:* | 12 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:* | 12 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:* | 12 sp1 | Vulnerable | SUSE |
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* Versions 7.0_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:* Versions 6.7_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:* Versions 7.2_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:* Versions 7.3_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:* Versions 7.4_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:* Versions 7.5_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:* Versions 7.6_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:* Versions 7.7_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:* Versions 6.0_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:* Versions 7.0_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:* Versions 6.7_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:* Versions 7.2_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:* Versions 7.3_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:* Versions 7.4_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:* Versions 7.5_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:* Versions 7.6_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:* Versions 7.7_ppc64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:* Versions 7.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:* Versions 7.2_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:* Versions 7.3_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:* Versions 7.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:* Versions 7.5_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:* Versions 7.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:* Versions 7.7_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.7z:*:*:*:*:*:*:* Versions 6.7z Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* Versions before 6.9.3-10 Vulnerable ·ImageMagick
- cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:* Versions 7.0.0-0 Vulnerable ·ImageMagick
- cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:* Versions 7.0.1-0 Vulnerable ·ImageMagick
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* Versions 15.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle
- cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Oracle
- cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·Oracle
- cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:* Versions 11 sp2 Vulnerable ·SUSE
- cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:* Versions 5 Vulnerable ·SUSE
- cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* Versions 42.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·openSUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* Versions 11 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:* Versions 11 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
Remediation
Red Hat 1 advisory
- RHSA-2016:0726 Released 2016-05-09 · Red Hat rating ImportantImageMagick security update
- Red Hat Enterprise Linux Client (v. 7) ImageMagick-6.7.8.9-13.el7_2, ImageMagick-c++-6.7.8.9-13.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) ImageMagick-c++-devel-6.7.8.9-13.el7_2, ImageMagick-devel-6.7.8.9-13.el7_2, ImageMagick-doc-6.7.8.9-13.el7_2 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ImageMagick-6.7.8.9-13.el7_2, ImageMagick-c++-6.7.8.9-13.el7_2, ImageMagick-c++-devel-6.7.8.9-13.el7_2 +3
- Red Hat Enterprise Linux Desktop (v. 6) ImageMagick-6.7.2.7-4.el6_7, ImageMagick-c++-6.7.2.7-4.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) ImageMagick-c++-6.7.2.7-4.el6_7, ImageMagick-c++-devel-6.7.2.7-4.el6_7, ImageMagick-devel-6.7.2.7-4.el6_7 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ImageMagick-6.7.2.7-4.el6_7, ImageMagick-c++-6.7.2.7-4.el6_7, ImageMagick-c++-devel-6.7.2.7-4.el6_7 +3
- Red Hat Enterprise Linux Server (v. 6) ImageMagick-6.7.2.7-4.el6_7, ImageMagick-6.7.2.7-4.el6_7.ppc, ImageMagick-c++-6.7.2.7-4.el6_7
- Red Hat Enterprise Linux Server (v. 7) ImageMagick-6.7.8.9-13.el7_2, ImageMagick-6.7.8.9-13.el7_2.ppc, ImageMagick-c++-6.7.8.9-13.el7_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) ImageMagick-c++-6.7.2.7-4.el6_7, ImageMagick-c++-6.7.2.7-4.el6_7.ppc, ImageMagick-c++-devel-6.7.2.7-4.el6_7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) ImageMagick-c++-6.7.8.9-13.el7_2, ImageMagick-c++-6.7.8.9-13.el7_2.ppc, ImageMagick-c++-devel-6.7.8.9-13.el7_2 +4
- Red Hat Enterprise Linux Workstation (v. 6) ImageMagick-6.7.2.7-4.el6_7, ImageMagick-c++-6.7.2.7-4.el6_7
- Red Hat Enterprise Linux Workstation (v. 7) ImageMagick-6.7.8.9-13.el7_2, ImageMagick-c++-6.7.8.9-13.el7_2, ImageMagick-perl-6.7.8.9-13.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ImageMagick-c++-6.7.2.7-4.el6_7, ImageMagick-c++-devel-6.7.2.7-4.el6_7, ImageMagick-devel-6.7.2.7-4.el6_7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ImageMagick-c++-devel-6.7.8.9-13.el7_2, ImageMagick-devel-6.7.8.9-13.el7_2, ImageMagick-doc-6.7.8.9-13.el7_2
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Enterprise 2 | Affected | No fix yet |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2016:0726 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2016:0726 |
Timeline
- 2021-11-03 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2016-3718
- 2026-10-03 Alias added: GHSA-q994-gg9f-3g56
References
Exploit 1
Patch 1
Advisory 15
- openSUSE-SU-2016:1266
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588
- openSUSE-SU-2016:1326
- USN-2990-1
- openSUSE-SU-2016:1261
- SUSE-SU-2016:1260
- [debian-lts-announce] 20180627 [SECURITY] [DLA 1401-1] graphicsmagick security update
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- [oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714
- GLSA-201611-21
- SUSE-SU-2016:1275
- SSA:2016-132-01
- DSA-3580
- RHSA-2016:0726
More Imagemagick vulnerabilities
- TI-2016-03144 The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT… KEVCVSS 3.1HIGH 8.4
- TI-2023-16996 Improper input validation in ImageMagick CVSS 3.1CRITICAL 9.8
- TI-2016-03145 The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote… KEVCVSS 3.1MEDIUM 5.5
- TI-2025-35690 ImageMagick BlobStream Forward-Seek Under-Allocation CVSS 3.1CRITICAL 9.8
- TI-2025-33094 ImageMagick has Stack Buffer Overflow in image.c CVSS 3.1CRITICAL 9.8
- TI-2025-33018 ImageMagick has Heap Buffer Overflow in InterpretImageFilename CVSS 3.1CRITICAL 9.8
Sources
- CVE-2016-3718 · CVE Program
- CVE-2016-3718 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-q994-gg9f-3g56 · GitHub Advisory Database · CC BY 4.0
- CVE-2016-3718 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences