USN-3363-1: ImageMagick vulnerabilities

Severity

Medium

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 14.04

Description

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Affected Cloud Foundry Products and Versions

Severity is medium unless otherwise noted.

• All versions of Cloud Foundry cflinuxfs2 prior to 1.141.0

Mitigation

OSS users are strongly encouraged to follow one of the mitigations below:

• The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 version 1.141.0 or later.

References

• USN-3363-1
• CVE-2017-10928
• CVE-2017-11141
• CVE-2017-11170
• CVE-2017-11188
• CVE-2017-11352
• CVE-2017-11360
• CVE-2017-11447
• CVE-2017-11448
• CVE-2017-11449
• CVE-2017-11450
• CVE-2017-11478
• CVE-2017-9261
• CVE-2017-9262
• CVE-2017-9405
• CVE-2017-9407
• CVE-2017-9409
• CVE-2017-9439
• CVE-2017-9440
• CVE-2017-9501