Nixpkgs security tracker

Untriaged

Permalink CVE-2023-5341

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 2 months ago

Imagemagick: heap use-after-free in coders/bmp.c

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

References

https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHAT
RHBZ#2241774 x_refsource_REDHATissue-tracking
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83…
https://access.redhat.com/security/cve/CVE-2023-5341 vdb-entryx_refsource_REDHATx_transferred
RHBZ#2241774 x_refsource_REDHATissue-trackingx_transferred
https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc83… x_transferred
https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred

Affected products

ImageMagick

==7.1.2

Matching in nixpkgs

pkgs.tests.pkg-config.defaultPkgConfigPackages.ImageMagick

Test whether imagemagick-7.1.1-40 exposes pkg-config modules ImageMagick

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@faukah faukah
@rhendric Ryan Hendrickson
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.tests.pkg-config.defaultPkgConfigPackages.ImageMagick

Package maintainers