Skip to content
OpenAdvisories
Unscored CVE-2014-9826 EUVD-2014-9631GHSA-64hf-cr4p-qj5v

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

Published Mar 30, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: imagemagick Package: imagemagick Ecosystem: Debian Ecosystem: Ubuntu

Description

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 imagemagick 8:6.8.9.9-4 —
Debian 13 imagemagick 8:6.8.9.9-4 —
Debian 12 imagemagick 8:6.8.9.9-4 —
Debian 7 imagemagick 8:6.7.7.10-5+deb7u8 DLA-731-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS imagemagick 8:6.8.9.9-7ubuntu5.2 USN-3131-1
Ubuntu 14.04 LTS imagemagick 8:6.7.7.10-6ubuntu3.2 USN-3131-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 ImageMagick 6.8.8.1-30.2 SUSE-SU-2016:1784-1
SLES 11 SP4 ImageMagick 6.4.3.6-7.45.1 SUSE-SU-2016:1782-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 ImageMagick 6.8.8.1-30.2 SUSE-SU-2016:1784-1
SLES for SAP 11 SP4 ImageMagick 6.4.3.6-7.45.1 SUSE-SU-2016:1782-1

Advisories 4

References