It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate ImageMagick policy configuration.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "imagemagick" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "imagemagick-6.q16" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "imagemagick-common" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libimage-magick-perl" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libimage-magick-q16-perl" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagick++-6-headers" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagick++-6.q16-5v5" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagick++-6.q16-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagick++-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-6-arch-config" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-6-headers" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-6.q16-2" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-6.q16-2-extra" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-6.q16-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickcore-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickwand-6-headers" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickwand-6.q16-2" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickwand-6.q16-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "libmagickwand-dev" }, { "binary_version": "8:6.8.9.9-7ubuntu5.14", "binary_name": "perlmagick" } ] }
{ "cves_map": { "ecosystem": "Ubuntu:16.04:LTS", "cves": [ { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2017-12805" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2017-12806" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-15607" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-16412" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-16413" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-17965" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-17966" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18016" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18024" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18025" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-20467" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7175" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7396" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7397" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7398" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2019-9956" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-10131" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2019-10650" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11470" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11472" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11597" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11598" } ] } }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "imagemagick" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "imagemagick-6-common" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "imagemagick-6.q16" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "imagemagick-6.q16hdri" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "imagemagick-common" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libimage-magick-perl" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libimage-magick-q16-perl" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libimage-magick-q16hdri-perl" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-6-headers" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-6.q16-7" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-6.q16-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-6.q16hdri-7" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-6.q16hdri-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagick++-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6-arch-config" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6-headers" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16-3" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16-3-extra" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16hdri-3" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16hdri-3-extra" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-6.q16hdri-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickcore-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-6-headers" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-6.q16-3" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-6.q16-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-6.q16hdri-3" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-6.q16hdri-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "libmagickwand-dev" }, { "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7", "binary_name": "perlmagick" } ] }
{ "cves_map": { "ecosystem": "Ubuntu:18.04:LTS", "cves": [ { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2017-12805" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2017-12806" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-15607" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-16412" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-16413" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-17965" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-17966" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18016" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18024" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18025" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-18544" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2018-20467" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7175" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7395" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7396" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7397" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "negligible" } ], "id": "CVE-2019-7398" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2019-9956" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-10131" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2019-10650" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11470" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11472" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11597" }, { "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "type": "Ubuntu", "score": "low" } ], "id": "CVE-2019-11598" } ] } }