suse · CVE-2016-3718

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-3718 severity moderate: SUSE including 191 source package names (GraphicsMagick, GraphicsMagick-1.2.5-4.35.1, …), 356 product×package rows across 81 product lines (HPE Helion OpenStack 8, SUSE Liberty Linux 7, … (81 product lines)): Fixed 266, Known Not Affected 90.

Description:

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.