It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate ImageMagick policy configuration.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "imagemagick"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "imagemagick-6.q16"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "imagemagick-common"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libimage-magick-perl"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libimage-magick-q16-perl"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagick++-6-headers"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagick++-6.q16-5v5"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagick++-6.q16-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagick++-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-6-arch-config"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-6-headers"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-6.q16-2"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-6.q16-2-extra"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-6.q16-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickcore-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickwand-6-headers"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickwand-6.q16-2"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickwand-6.q16-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "libmagickwand-dev"
},
{
"binary_version": "8:6.8.9.9-7ubuntu5.14",
"binary_name": "perlmagick"
}
]
}
{
"cves": [
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2017-12805"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2017-12806"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-15607"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-16412"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-16413"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-17965"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-17966"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18016"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18024"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18025"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-20467"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7175"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7396"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7397"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7398"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2019-9956"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-10131"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2019-10650"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11470"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11472"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11597"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11598"
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "imagemagick"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "imagemagick-6-common"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "imagemagick-6.q16"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "imagemagick-6.q16hdri"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "imagemagick-common"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libimage-magick-perl"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libimage-magick-q16-perl"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libimage-magick-q16hdri-perl"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-6-headers"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-6.q16-7"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-6.q16-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-6.q16hdri-7"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-6.q16hdri-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagick++-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6-arch-config"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6-headers"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16-3"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16-3-extra"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16hdri-3"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16hdri-3-extra"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-6.q16hdri-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickcore-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-6-headers"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-6.q16-3"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-6.q16-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-6.q16hdri-3"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-6.q16hdri-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "libmagickwand-dev"
},
{
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.7",
"binary_name": "perlmagick"
}
]
}
{
"cves": [
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2017-12805"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2017-12806"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-15607"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-16412"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-16413"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-17965"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-17966"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18016"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18024"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18025"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-18544"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2018-20467"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7175"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7395"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7396"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7397"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-7398"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2019-9956"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-10131"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2019-10650"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11470"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11472"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11597"
},
{
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2019-11598"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}