Home

CVE-2016-3718

Description

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
83.834

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.1Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.1Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.1Windows
Image manipulation programs and library (USN-2990-1) imagemagick_6.6.9.7-5ubuntu3.4_i386.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.6.9.7-5ubuntu3.4_amd64.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.8.9.9-5ubuntu2.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.8.9.9-5ubuntu2.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.8.9.9-7ubuntu5.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.8.9.9-7ubuntu5.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.7.7.10-6ubuntu3.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) imagemagick_6.7.7.10-6ubuntu3.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++4_6.6.9.7-5ubuntu3.4_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++4_6.6.9.7-5ubuntu3.4_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++5_6.7.7.10-6ubuntu3.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++5_6.7.7.10-6ubuntu3.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore4_6.6.9.7-5ubuntu3.4_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore4_6.6.9.7-5ubuntu3.4_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore5_6.7.7.10-6ubuntu3.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore5_6.7.7.10-6ubuntu3.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.1_amd64.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore-6.q16-2_6.8.9.9-7ubuntu5_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.1_i386.debLinux
Image manipulation programs and library (USN-2990-1) libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.1_amd64.debLinux
Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-3718)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234