USN-5736-2 (UBUNTU-CVE-2021-3574)

Vulnerability from osv_ubuntu – Published: 2022-11-24 11:23 – Updated: 2026-04-27 14:11 – Source website
VLAI
Summary
imagemagick vulnerabilities
Details

USN-5736-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding updates for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM. One of the issues, CVE-2021-20224, only affected Ubuntu 20.04 ESM, while CVE-2021-20245, CVE-2021-3574, CVE-2021-4219 and CVE-2022-1114 only affected Ubuntu 22.04 ESM.

Original advisory details:

It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2021-20224)

Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values when processing image data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2021-20241)

Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values when processing image data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2021-20243)

It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20244)

It was discovered that ImageMagick could be made to divide by zero when processing crafted files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20245)

It was discovered that ImageMagick incorrectly handled certain values when performing resampling operations. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20246)

It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20309)

It was discovered that ImageMagick incorrectly handled certain values when processing thumbnail image data. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20312)

It was discovered that ImageMagick incorrectly handled memory cleanup when performing certain cryptographic operations. Under certain conditions sensitive cryptographic information could be disclosed. This issue only affected Ubuntu 22.10. (CVE-2021-20313)

It was discovered that ImageMagick did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file using the convert command, an attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-3574)

It was discovered that ImageMagick did not use the correct rights when specifically excluded by a module policy. An attacker could use this issue to read and write certain restricted files. This issue only affected Ubuntu 22.10. (CVE-2021-39212)

It was discovered that ImageMagick incorrectly handled certain values when processing specially crafted SVG files. By tricking a user into opening a specially crafted SVG file, an attacker could crash the application causing a denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-4219)

It was discovered that ImageMagick did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted DICOM file, an attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or expose sensitive information. This issue only affected Ubuntu 22.10. (CVE-2022-1114)

It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were tricked into opening a specially crafted image file, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 22.10. (CVE-2022-28463)

It was discovered that ImageMagick incorrectly handled certain values. If a user were tricked into processing a specially crafted image file, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2022-32545, CVE-2022-32546)

It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were tricked into processing a specially crafted image file, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2022-32547)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-20224",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "imagemagick",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "imagemagick-6-common",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "imagemagick-6.q16hdri",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagick++-6.q16-8",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagick++-6.q16hdri-8",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16-6-extra",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16hdri-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16hdri-6-extra",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickwand-6.q16-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "libmagickwand-6.q16hdri-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          },
          {
            "binary_name": "perlmagick",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "imagemagick",
        "purl": "pkg:deb/ubuntu/imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1?arch=source\u0026distro=esm-apps/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8:6.9.10.23+dfsg-2.1ubuntu3",
        "8:6.9.10.23+dfsg-2.1ubuntu8",
        "8:6.9.10.23+dfsg-2.1ubuntu9",
        "8:6.9.10.23+dfsg-2.1ubuntu10",
        "8:6.9.10.23+dfsg-2.1ubuntu11",
        "8:6.9.10.23+dfsg-2.1ubuntu11.1",
        "8:6.9.10.23+dfsg-2.1ubuntu11.2",
        "8:6.9.10.23+dfsg-2.1ubuntu11.4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-3574",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-4219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20241",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20243",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20244",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20245",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20246",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20309",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20312",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-20313",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-39212",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1114",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-28463",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32545",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32546",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32547",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "imagemagick",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "imagemagick-6-common",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "imagemagick-6.q16hdri",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagick++-6.q16-8",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagick++-6.q16hdri-8",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16-6-extra",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16hdri-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickcore-6.q16hdri-6-extra",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickwand-6.q16-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "libmagickwand-6.q16hdri-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          },
          {
            "binary_name": "perlmagick",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "imagemagick",
        "purl": "pkg:deb/ubuntu/imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8:6.9.11.60+dfsg-1ubuntu1",
        "8:6.9.11.60+dfsg-1.3",
        "8:6.9.11.60+dfsg-1.3build1",
        "8:6.9.11.60+dfsg-1.3build2",
        "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-5736-1 fixed vulnerabilities in ImageMagick. This update provides the\ncorresponding updates for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM. One of the\nissues, CVE-2021-20224, only affected Ubuntu 20.04 ESM, while\nCVE-2021-20245, CVE-2021-3574, CVE-2021-4219 and CVE-2022-1114 only\naffected Ubuntu 22.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that ImageMagick incorrectly handled certain values\n when processing PDF files. If a user or automated system using ImageMagick\n were tricked into opening a specially crafted PDF file, an attacker could\n exploit this to cause a denial of service. This issue only affected Ubuntu\n 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2021-20224)\n \n Zhang Xiaohui discovered that ImageMagick incorrectly handled certain\n values when processing image data. If a user or automated system using\n ImageMagick were tricked into opening a specially crafted image, an\n attacker could exploit this to cause a denial of service. This issue only\n affected Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2021-20241)\n \n Zhang Xiaohui discovered that ImageMagick incorrectly handled certain\n values when processing image data. If a user or automated system using\n ImageMagick were tricked into opening a specially crafted image, an\n attacker could exploit this to cause a denial of service. This issue only\n affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 22.10.\n (CVE-2021-20243)\n \n It was discovered that ImageMagick incorrectly handled certain values\n when processing visual effects based image files. By tricking a user into\n opening a specially crafted image file, an attacker could crash the\n application causing a denial of service. This issue only affected Ubuntu\n 22.10. (CVE-2021-20244)\n \n It was discovered that ImageMagick could be made to divide by zero when\n processing crafted files. By tricking a user into opening a specially\n crafted image file, an attacker could crash the application causing a\n denial of service. This issue only affected Ubuntu 22.10. (CVE-2021-20245)\n \n It was discovered that ImageMagick incorrectly handled certain values\n when performing resampling operations. By tricking a user into opening\n a specially crafted image file, an attacker could crash the application\n causing a denial of service. This issue only affected Ubuntu 22.10.\n (CVE-2021-20246)\n \n It was discovered that ImageMagick incorrectly handled certain values\n when processing visual effects based image files. By tricking a user into\n opening a specially crafted image file, an attacker could crash the\n application causing a denial of service. This issue only affected Ubuntu\n 22.10. (CVE-2021-20309)\n \n It was discovered that ImageMagick incorrectly handled certain values\n when processing thumbnail image data. By tricking a user into opening\n a specially crafted image file, an attacker could crash the application\n causing a denial of service. This issue only affected Ubuntu 22.10.\n (CVE-2021-20312)\n \n It was discovered that ImageMagick incorrectly handled memory cleanup\n when performing certain cryptographic operations. Under certain conditions\n sensitive cryptographic information could be disclosed. This issue only\n affected Ubuntu 22.10. (CVE-2021-20313)\n \n It was discovered that ImageMagick did not properly manage memory under\n certain circumstances. If a user were tricked into opening a specially\n crafted file using the convert command, an attacker could possibly use\n this issue to cause ImageMagick to crash, resulting in a denial of\n service. This issue only affected Ubuntu 22.10. (CVE-2021-3574)\n \n It was discovered that ImageMagick did not use the correct rights when\n specifically excluded by a module policy. An attacker could use this issue\n to read and write certain restricted files. This issue only affected\n Ubuntu 22.10. (CVE-2021-39212)\n \n It was discovered that ImageMagick incorrectly handled certain values\n when processing specially crafted SVG files. By tricking a user into\n opening a specially crafted SVG file, an attacker could crash the\n application causing a denial of service. This issue only affected Ubuntu\n 22.10. (CVE-2021-4219)\n \n It was discovered that ImageMagick did not properly manage memory under\n certain circumstances. If a user were tricked into opening a specially\n crafted DICOM file, an attacker could possibly use this issue to cause\n ImageMagick to crash, resulting in a denial of service, or expose sensitive\n information. This issue only affected Ubuntu 22.10. (CVE-2022-1114)\n \n It was discovered that ImageMagick incorrectly handled memory under\n certain circumstances. If a user were tricked into opening a specially\n crafted image file, an attacker could possibly exploit this issue to cause\n a denial of service or other unspecified impact. This issue only affected\n Ubuntu 22.10. (CVE-2022-28463)\n \n It was discovered that ImageMagick incorrectly handled certain values.\n If a user were tricked into processing a specially crafted image file,\n an attacker could possibly exploit this issue to cause a denial of service\n or other unspecified impact. This issue only affected Ubuntu 14.04 ESM,\n Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2022-32545, CVE-2022-32546)\n \n It was discovered that ImageMagick incorrectly handled memory under\n certain circumstances. If a user were tricked into processing a specially\n crafted image file, an attacker could possibly exploit this issue to cause\n a denial of service or other unspecified impact. This issue only affected\n Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 22.10. (CVE-2022-32547)\n",
  "id": "USN-5736-2",
  "modified": "2026-04-27T14:11:29Z",
  "published": "2022-11-24T11:23:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5736-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3574"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-4219"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20224"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20241"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20243"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20244"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20245"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20246"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20309"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20312"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-20313"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-39212"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1114"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-28463"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32545"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32546"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32547"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "imagemagick vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-3574",
    "UBUNTU-CVE-2021-4219",
    "UBUNTU-CVE-2021-20224",
    "UBUNTU-CVE-2021-20241",
    "UBUNTU-CVE-2021-20243",
    "UBUNTU-CVE-2021-20244",
    "UBUNTU-CVE-2021-20245",
    "UBUNTU-CVE-2021-20246",
    "UBUNTU-CVE-2021-20309",
    "UBUNTU-CVE-2021-20312",
    "UBUNTU-CVE-2021-20313",
    "UBUNTU-CVE-2021-39212",
    "UBUNTU-CVE-2022-1114",
    "UBUNTU-CVE-2022-28463",
    "UBUNTU-CVE-2022-32545",
    "UBUNTU-CVE-2022-32546",
    "UBUNTU-CVE-2022-32547"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.