CVE-2023-3195

概要

参考情報

• access.redhat.com/security/cve/CVE-2023-3195 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• ImageMagick/ImageMagick commit f620340 · Patch
• ImageMagick/ImageMagick6 commit 85a370c · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3
• openwall.com/lists/oss-security/2023/05/29/1 · Exploit

extra packages for enterprise linux のその他の脆弱性

• CVE-2023-6395緊急 9.8The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arb…
• CVE-2024-0232中 5.5A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local att…
• CVE-2023-51766中 5.3Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation te…
• CVE-2023-4256中 5.5Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plug…
• CVE-2023-4255中 5.5An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. …