{"cves":[{"id":"CVE-2017-12616","published":"2017-09-19T00:00:00","updated_at":"2025-08-25T22:22:21.165537+00:00","description":"\nWhen using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was\npossible to bypass security constraints and/or view the source code of JSPs\nfor resources served by the VirtualDirContext using a specially crafted\nrequest.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this commit is included in commit list for CVE-2017-12617"},{"author":"nic89","note":"package tomcat7 does not build affected binaries in Bionic."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.81","https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6@%3Cannounce.tomcat.apache.org%3E","https://ubuntu.com/security/notices/USN-3665-1","https://www.cve.org/CVERecord?id=CVE-2017-12616","https://ubuntu.com/security/notices/USN-7282-1"],"bugs":[""],"patches":{"tomcat7":["upstream: https://svn.apache.org/r1804729"],"tomcat8":[]},"tags":{},"packages":[{"name":"tomcat7","source":"https://ubuntu.com/security/cve?package=tomcat7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tomcat7","debian":"https://tracker.debian.org/pkg/tomcat7","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"7.0.68-1ubuntu0.4+esm3","component":null,"pocket":"esm-apps"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"7.0.52-1ubuntu0.14","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.0.82","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needed","component":null,"pocket":"security"}]},{"name":"tomcat8","source":"https://ubuntu.com/security/cve?package=tomcat8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tomcat8","debian":"https://tracker.debian.org/pkg/tomcat8","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"8.5.30-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"8.5.30-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.47,8.5.23","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-3665-1","USN-7282-1"],"notices":[{"id":"USN-3665-1","title":"Tomcat vulnerabilities","summary":"Several security issues were fixed in Tomcat.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-05-30T17:47:08.145673","description":"It was discovered that Tomcat incorrectly handled being configured with\nHTTP PUTs enabled. A remote attacker could use this issue to upload a JSP\nfile to the server and execute arbitrary code. This issue only affected\nUbuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2017-12616,\nCVE-2017-12617)\n\nIt was discovered that Tomcat contained incorrect documentation regarding\ndescription of the search algorithm used by the CGI Servlet to identify\nwhich script to execute. This issue only affected Ubuntu 17.10.\n(CVE-2017-15706)\n\nIt was discovered that Tomcat incorrectly handled en empty string URL\npattern in security constraint definitions. A remote attacker could\npossibly use this issue to gain access to web application resources,\ncontrary to expectations. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-1304)\n\nIt was discovered that Tomcat incorrectly handled applying certain security\nconstraints. A remote attacker could possibly access certain resources,\ncontrary to expectations. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-1305)\n\nIt was discovered that the Tomcat CORS filter default settings were\ninsecure and would enable 'supportsCredentials' for all origins, contrary\nto expectations. (CVE-2018-8014)\n","is_hidden":false,"release_packages":{"artful":[{"name":"tomcat8","version":"8.5.21-1ubuntu1.1","description":"Servlet and JSP engine","is_source":true},{"name":"libtomcat8-java","version":"8.5.21-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.21-1ubuntu1.1"},{"name":"tomcat8","version":"8.5.21-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.21-1ubuntu1.1"}],"bionic":[{"name":"tomcat8","version":"8.5.30-1ubuntu1.2","description":"Servlet and JSP engine","is_source":true},{"name":"libservlet3.1-java","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"libservlet3.1-java-doc","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"libtomcat8-embed-java","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"libtomcat8-java","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8-admin","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8-common","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8-docs","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8-examples","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"},{"name":"tomcat8-user","version":"8.5.30-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.5.30-1ubuntu1.2","pocket":"security"}],"trusty":[{"name":"tomcat7","version":"7.0.52-1ubuntu0.14","description":"Servlet and JSP engine","is_source":true},{"name":"libservlet3.0-java","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"libservlet3.0-java-doc","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"libtomcat7-java","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7-admin","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7-common","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7-docs","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7-examples","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"},{"name":"tomcat7-user","version":"7.0.52-1ubuntu0.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.14","pocket":"security"}],"xenial":[{"name":"tomcat8","version":"8.0.32-1ubuntu1.6","description":"Servlet and JSP engine","is_source":true},{"name":"libservlet3.1-java","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"libservlet3.1-java-doc","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"libtomcat8-java","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8-admin","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8-common","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8-docs","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8-examples","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"},{"name":"tomcat8-user","version":"8.0.32-1ubuntu1.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat8","version_link":"https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-12616","CVE-2017-12617","CVE-2017-15706","CVE-2018-1304","CVE-2018-1305","CVE-2018-8014"]},{"id":"USN-7282-1","title":"tomcat7 vulnerabilities","summary":"tomcat7 could be made to execute arbitrary code.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2025-02-21T00:19:44.382998","description":"It was discovered that Tomcat incorrectly handled being configured with\nHTTP PUTs enabled. A remote attacker could use this issue to upload a JSP\nfile to the server and execute arbitrary code.\n","is_hidden":false,"release_packages":{"xenial":[{"name":"tomcat7","version":"7.0.68-1ubuntu0.4+esm3","description":"Servlet and JSP engine","is_source":true},{"name":"libservlet3.0-java","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"libservlet3.0-java-doc","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"libtomcat7-java","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7-admin","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7-common","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7-docs","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7-examples","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"},{"name":"tomcat7-user","version":"7.0.68-1ubuntu0.4+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2017-12616","CVE-2017-12617"]}]},{"id":"CVE-2017-10784","published":"2017-09-19T00:00:00","updated_at":"2025-08-25T22:19:44.813240+00:00","description":"\nThe Basic authentication code in WEBrick library in Ruby before 2.2.8,\n2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to\ninject terminal emulator escape sequences into its log and possibly execute\narbitrary commands via a crafted user name.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/","https://hackerone.com/reports/223363","https://ubuntu.com/security/notices/USN-3439-1","https://ubuntu.com/security/notices/USN-3528-1","https://ubuntu.com/security/notices/USN-3685-1","https://www.cve.org/CVERecord?id=CVE-2017-10784"],"bugs":[""],"patches":{"ruby1.9.1":[],"ruby2.0":[],"ruby2.3":["upstream: https://github.com/ruby/ruby/commit/6617c41292b7d1e097abb8fdb0cab9ddd83c77e7"]},"tags":{},"packages":[{"name":"ruby1.9.1","source":"https://ubuntu.com/security/cve?package=ruby1.9.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby1.9.1","debian":"https://tracker.debian.org/pkg/ruby1.9.1","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.9.3.484-2ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby2.0","source":"https://ubuntu.com/security/cve?package=ruby2.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby2.0","debian":"https://tracker.debian.org/pkg/ruby2.0","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.0.484-1ubuntu2.10","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby2.3","source":"https://ubuntu.com/security/cve?package=ruby2.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby2.3","debian":"https://tracker.debian.org/pkg/ruby2.3","statuses":[{"release_codename":"artful","status":"released","description":"2.3.3-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.3.1-2~16.04.5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3439-1","USN-3685-1","USN-3528-1"],"notices":[{"id":"USN-3439-1","title":"Ruby vulnerabilities","summary":"Several security issues were fixed in Ruby.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-05T16:05:42.753411","description":"It was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a buffer overrun.\n(CVE-2017-0898)\n\nYusuke Endoh discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to execute terminal escape sequences.\n(CVE-2017-0899)\n\nYusuke Endoh discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a denial of service.\n(CVE-2017-0900)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to overwrite any file on the filesystem.\n(CVE-2017-0901)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to execute arbitrary code.\n(CVE-2017-10784)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a denial of service.\n(CVE-2017-14033)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to expose sensitive information.\n(CVE-2017-14064)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.5","description":"Object-oriented scripting language","is_source":true},{"name":"libruby1.9.1","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"libtcltk-ruby1.9.1","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ri1.9.1","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ruby1.9.1-dev","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ruby1.9.1-examples","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ruby1.9.1-full","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"},{"name":"ruby1.9.3","version":"1.9.3.484-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-0898","CVE-2017-0899","CVE-2017-0900","CVE-2017-0901","CVE-2017-10784","CVE-2017-14033","CVE-2017-14064"]},{"id":"USN-3685-1","title":"Ruby vulnerabilities","summary":"Several security issues were fixed in Ruby.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-13T19:56:22.414202","description":"Some of these CVE were already addressed in previous\nUSN: 3439-1, 3553-1, 3528-1. Here we address for\nthe remain releases.\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to cause a buffer overrun. (CVE-2017-0898)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to overwrite any file on the filesystem.\n(CVE-2017-0901)\n\nIt was discovered that Ruby was vulnerable to a DNS hijacking vulnerability.\nAn attacker could use this to possibly force the RubyGems client to download\nand install gems from a server that the attacker controls. (CVE-2017-0902)\n\nIt was discovered that Ruby incorrectly handled certain YAML files.\nAn attacker could use this to possibly execute arbitrary code. (CVE-2017-0903)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could use this to expose sensitive information.\n(CVE-2017-14064)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to execute arbitrary code. (CVE-2017-10784)\n\nIt was discovered that Ruby incorrectly handled certain network requests.\nAn attacker could possibly use this to inject a crafted key into a HTTP\nresponse. (CVE-2017-17742)\n\nIt was discovered that Ruby incorrectly handled certain files.\nAn attacker could possibly use this to execute arbitrary code.\nThis update is only addressed to ruby2.0. (CVE-2018-1000074)\n\nIt was discovered that Ruby incorrectly handled certain network requests.\nAn attacker could possibly use this to cause a denial of service.\n(CVE-2018-8777)\n","is_hidden":false,"release_packages":{"artful":[{"name":"ruby2.3","version":"2.3.3-1ubuntu1.6","description":"Object-oriented scripting language","is_source":true},{"name":"libruby2.3","version":"2.3.3-1ubuntu1.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.3-1ubuntu1.6"},{"name":"ruby2.3","version":"2.3.3-1ubuntu1.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.3-1ubuntu1.6"}],"trusty":[{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.12","description":"Object-oriented scripting language","is_source":true},{"name":"ruby2.0","version":"2.0.0.484-1ubuntu2.10","description":"Object-oriented scripting language","is_source":true},{"name":"libruby1.9.1","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"libruby2.0","version":"2.0.0.484-1ubuntu2.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.0","version_link":"https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.10","pocket":"security"},{"name":"libtcltk-ruby1.9.1","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ri1.9.1","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby1.9.1-dev","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby1.9.1-examples","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby1.9.1-full","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby1.9.3","version":"1.9.3.484-2ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12","pocket":"security"},{"name":"ruby2.0","version":"2.0.0.484-1ubuntu2.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.0","version_link":"https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.10","pocket":"security"},{"name":"ruby2.0-dev","version":"2.0.0.484-1ubuntu2.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.0","version_link":"https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.10","pocket":"security"},{"name":"ruby2.0-doc","version":"2.0.0.484-1ubuntu2.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.0","version_link":"https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.10","pocket":"security"},{"name":"ruby2.0-tcltk","version":"2.0.0.484-1ubuntu2.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.0","version_link":"https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.10","pocket":"security"}],"xenial":[{"name":"ruby2.3","version":"2.3.1-2~16.04.10","description":"Object-oriented scripting language","is_source":true},{"name":"libruby2.3","version":"2.3.1-2~16.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.10","pocket":"security"},{"name":"ruby2.3","version":"2.3.1-2~16.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.10","pocket":"security"},{"name":"ruby2.3-dev","version":"2.3.1-2~16.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.10","pocket":"security"},{"name":"ruby2.3-doc","version":"2.3.1-2~16.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.10","pocket":"security"},{"name":"ruby2.3-tcltk","version":"2.3.1-2~16.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-0898","CVE-2017-0901","CVE-2017-0902","CVE-2017-0903","CVE-2017-10784","CVE-2017-14064","CVE-2017-17742","CVE-2018-1000074","CVE-2018-8777"]},{"id":"USN-3528-1","title":"Ruby vulnerabilities","summary":"Several security issues were fixed in Ruby.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-01-10T14:22:37.190761","description":"It was discovered that Ruby incorrectly handled certain terminal emulator\nescape sequences. An attacker could use this to execute arbitrary code via\na crafted user name. This issue only affected Ubuntu 16.04 LTS and Ubuntu 17.10.\n(CVE-2017-10784)\n\nIt was discovered that Ruby incorrectly handled certain strings.\nAn attacker could use this to cause a denial of service. This issue\nonly affected Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2017-14033)\n\nIt was discovered that Ruby incorrectly handled some generating JSON.\nAn attacker could use this to possible expose sensitive information.\nThis issue only affected Ubuntu 16.04 LTS and Ubuntu 17.10.\n(CVE-2017-14064)\n\nIt was discovered that Ruby incorrectly handled certain inputs.\nAn attacker could use this to execute arbitrary code.\n(CVE-2017-17790)\n","is_hidden":false,"release_packages":{"artful":[{"name":"ruby2.3","version":"2.3.3-1ubuntu1.2","description":"Interpreter of object-oriented scripting language Ruby","is_source":true},{"name":"libruby2.3","version":"2.3.3-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.3-1ubuntu1.2"},{"name":"ruby2.3","version":"2.3.3-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.3-1ubuntu1.2"}],"trusty":[{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.7","description":"Interpreter of object-oriented scripting language Ruby","is_source":true},{"name":"libruby1.9.1","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"libtcltk-ruby1.9.1","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ri1.9.1","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ruby1.9.1","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ruby1.9.1-dev","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ruby1.9.1-examples","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ruby1.9.1-full","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"},{"name":"ruby1.9.3","version":"1.9.3.484-2ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1","version_link":"https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7","pocket":"security"}],"xenial":[{"name":"ruby2.3","version":"2.3.1-2~16.04.5","description":"Interpreter of object-oriented scripting language Ruby","is_source":true},{"name":"libruby2.3","version":"2.3.1-2~16.04.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.5","pocket":"security"},{"name":"ruby2.3","version":"2.3.1-2~16.04.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.5","pocket":"security"},{"name":"ruby2.3-dev","version":"2.3.1-2~16.04.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.5","pocket":"security"},{"name":"ruby2.3-doc","version":"2.3.1-2~16.04.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.5","pocket":"security"},{"name":"ruby2.3-tcltk","version":"2.3.1-2~16.04.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ruby2.3","version_link":"https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~16.04.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-10784","CVE-2017-14033","CVE-2017-14064","CVE-2017-17790"]}]},{"id":"CVE-2017-9803","published":"2017-09-18T21:29:00","updated_at":"2025-08-25T22:42:09.396363+00:00","description":"\nApache Solr's Kerberos plugin can be configured to use delegation tokens,\nwhich allows an application to reuse the authentication of an end-user or\nanother application. There are two issues with this functionality (when\nusing SecurityAwareZkACLProvider type of ACL provider e.g.\nSaslZkACLProvider). Firstly, access to the security configuration can be\nleaked to users other than the solr super user. Secondly, malicious users\ncan exploit this leaked configuration for privilege escalation to further\nexpose/modify private data and/or disrupt operations in the Solr cluster.\nThe vulnerability is fixed from Apache Solr 6.6.1 onwards.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced in 6.2"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw@mail.gmail.com%3E","https://www.cve.org/CVERecord?id=CVE-2017-9803"],"bugs":[""],"patches":{"lucene-solr":[]},"tags":{},"packages":[{"name":"lucene-solr","source":"https://ubuntu.com/security/cve?package=lucene-solr","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lucene-solr","debian":"https://tracker.debian.org/pkg/lucene-solr","statuses":[{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-0380","published":"2017-09-18T16:29:00","updated_at":"2025-08-25T22:15:51.238576+00:00","description":"\nThe rend_service_intro_established function in or/rendservice.c in Tor\nbefore 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x\nbefore 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is\ndisabled, allows attackers to obtain sensitive information by leveraging\naccess to the log files of a hidden service, because uninitialized stack\ndata is included in an error message about construction of an introduction\npoint circuit.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://trac.torproject.org/projects/tor/ticket/23490","https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486","https://www.cve.org/CVERecord?id=CVE-2017-0380"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876221"],"patches":{"tor":[]},"tags":{},"packages":[{"name":"tor","source":"https://ubuntu.com/security/cve?package=tor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tor","debian":"https://tracker.debian.org/pkg/tor","statuses":[{"release_codename":"artful","status":"released","description":"0.3.0.13-0ubuntu1~17.10.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"0.3.2.10-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.2.9.12-1, 0.3.1.7-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.2.9.14-1ubuntu1~16.04.2","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12157","published":"2017-09-18T04:29:00","updated_at":"2025-08-26T11:57:32.241291+00:00","description":"\nIn Moodle 3.x, various course reports allow teachers to view details about\nusers in the groups they can't access.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://moodle.org/mod/forum/discuss.php?d=358586","https://www.cve.org/CVERecord?id=CVE-2017-12157"],"bugs":[""],"patches":{"moodle":[]},"tags":{},"packages":[{"name":"moodle","source":"https://ubuntu.com/security/cve?package=moodle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moodle","debian":"https://tracker.debian.org/pkg/moodle","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12156","published":"2017-09-18T04:29:00","updated_at":"2025-08-26T11:57:32.241291+00:00","description":"\nMoodle 3.x has XSS in the contact form on the \"non-respondents\" page in\nnon-anonymous feedback.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://moodle.org/mod/forum/discuss.php?d=358585","https://www.cve.org/CVERecord?id=CVE-2017-12156"],"bugs":[""],"patches":{"moodle":[]},"tags":{},"packages":[{"name":"moodle","source":"https://ubuntu.com/security/cve?package=moodle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moodle","debian":"https://tracker.debian.org/pkg/moodle","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-14529","published":"2017-09-18T00:29:00","updated_at":"2025-08-26T11:58:03.980787+00:00","description":"\nThe pe_print_idata function in peXXigen.c in the Binary File Descriptor\n(BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles\nHintName vector entries, which allows remote attackers to cause a denial of\nservice (heap-based buffer over-read and application crash) via a crafted\nPE file, related to the bfd_getl16 function.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22113","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=4d465c689a8fb27212ef358d0aee89d60dee69a6","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=dcaaca89e8618eba35193c27afcb1cfa54f74582","https://ubuntu.com/security/notices/USN-4336-2","https://www.cve.org/CVERecord?id=CVE-2017-14529"],"bugs":[""],"patches":{"binutils":["upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=4d465c689a8fb27212ef358d0aee89d60dee69a6","upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=dcaaca89e8618eba35193c27afcb1cfa54f74582"]},"tags":{},"packages":[{"name":"binutils","source":"https://ubuntu.com/security/cve?package=binutils","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=binutils","debian":"https://tracker.debian.org/pkg/binutils","statuses":[{"release_codename":"artful","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.26.1-1ubuntu1~16.04.8+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"impish","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.29.1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.29.1-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4336-2"],"notices":[{"id":"USN-4336-2","title":"GNU binutils vulnerabilities","summary":"Several security issues were fixed in GNU binutils.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-07-21T13:08:04.326367","description":"USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that GNU binutils contained a large number of security\n issues. If a user or automated system were tricked into processing a\n specially-crafted file, a remote attacker could cause GNU binutils to\n crash, resulting in a denial of service, or possibly execute arbitrary\n code.\n","is_hidden":false,"release_packages":{"xenial":[{"name":"binutils","version":"2.26.1-1ubuntu1~16.04.8+esm1","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-aarch64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-alpha-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabi","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabihf","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-dev","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-doc","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-m68k-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64-linux-gnuabi64","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64el-linux-gnuabi64","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsel-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch-dev","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnuspe","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64le-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-s390x-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sh4-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-source","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sparc64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2018-19932","CVE-2019-9074","CVE-2018-18309","CVE-2017-12451","CVE-2017-16828","CVE-2017-7302","CVE-2017-9751","CVE-2017-17080","CVE-2018-12700","CVE-2017-14130","CVE-2018-18483","CVE-2018-7568","CVE-2017-14128","CVE-2017-9749","CVE-2017-12458","CVE-2019-9070","CVE-2017-9755","CVE-2018-10534","CVE-2017-9746","CVE-2019-12972","CVE-2017-7300","CVE-2018-9138","CVE-2017-7299","CVE-2016-4488","CVE-2017-15020","CVE-2017-9742","CVE-2017-17125","CVE-2017-14939","CVE-2019-14250","CVE-2017-14129","CVE-2017-12967","CVE-2017-17124","CVE-2018-12934","CVE-2017-7210","CVE-2017-8395","CVE-2017-7227","CVE-2017-12459","CVE-2017-9754","CVE-2018-20002","CVE-2016-4489","CVE-2019-9073","CVE-2018-8945","CVE-2017-12448","CVE-2016-4491","CVE-2018-17794","CVE-2017-13710","CVE-2017-14333","CVE-2017-15021","CVE-2017-14940","CVE-2017-14930","CVE-2017-7225","CVE-2017-7223","CVE-2017-12452","CVE-2017-6965","CVE-2018-18701","CVE-2017-15024","CVE-2018-10372","CVE-2018-18484","CVE-2017-16832","CVE-2017-9748","CVE-2017-15225","CVE-2018-7569","CVE-2017-16831","CVE-2018-17358","CVE-2018-6543","CVE-2017-7224","CVE-2016-4493","CVE-2017-17121","CVE-2017-9041","CVE-2019-9071","CVE-2018-19931","CVE-2017-9756","CVE-2018-18700","CVE-2018-10373","CVE-2019-17451","CVE-2018-12697","CVE-2018-18606","CVE-2018-12641","CVE-2017-17123","CVE-2016-4492","CVE-2017-16826","CVE-2017-9753","CVE-2018-6323","CVE-2017-8394","CVE-2017-16827","CVE-2017-12450","CVE-2016-6131","CVE-2017-14529","CVE-2017-9038","CVE-2016-2226","CVE-2017-9747","CVE-2016-4490","CVE-2017-12456","CVE-2018-20671","CVE-2018-10535","CVE-2016-4487","CVE-2017-15939","CVE-2018-7643","CVE-2018-13033","CVE-2017-9039","CVE-2017-15022","CVE-2017-8393","CVE-2018-20623","CVE-2017-9744","CVE-2018-7642","CVE-2017-9752","CVE-2018-12698","CVE-2018-12699","CVE-2017-15996","CVE-2017-9044","CVE-2018-6759","CVE-2017-9745","CVE-2018-7208","CVE-2017-6969","CVE-2017-12449","CVE-2017-14932","CVE-2017-7614","CVE-2017-12454","CVE-2018-1000876","CVE-2017-8396","CVE-2017-8397","CVE-2017-12455","CVE-2017-9954","CVE-2018-17360","CVE-2019-14444","CVE-2019-9075","CVE-2018-17985","CVE-2017-8398","CVE-2018-18607","CVE-2017-8421","CVE-2019-17450","CVE-2017-12799","CVE-2017-15938","CVE-2017-7301","CVE-2017-9750","CVE-2017-7226","CVE-2017-15025","CVE-2018-18605","CVE-2017-9042","CVE-2017-12457","CVE-2017-12453","CVE-2018-17359","CVE-2017-9040","CVE-2017-7209","CVE-2019-9077","CVE-2017-6966","CVE-2017-14938"]}]},{"id":"CVE-2017-14528","published":"2017-09-18T00:29:00","updated_at":"2025-08-18T17:06:15.574460+00:00","description":"\nThe TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has\nincorrect expectations about whether LibTIFF TIFFGetField return values\nimply that data validation has occurred, which allows remote attackers to\ncause a denial of service (use-after-free after an invalid call to\nTIFFSetField, and application crash) via a crafted file.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"code not present in jessie"},{"author":"sespiros","note":"(xenial) cannot reproduce in 8:6.8.9.9-7ubuntu5.16+esm1"}],"codename":null,"priority":"negligible","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32560","https://ubuntu.com/security/notices/USN-4988-1","https://www.cve.org/CVERecord?id=CVE-2017-14528"],"bugs":["http://bugzilla.maptools.org/show_bug.cgi?id=2730","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878544"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick6/commit/6f7cba13ebae405b2689647a2277827f1c272364"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"focal","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"2020-10-26","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2020-10-26","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.11","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8:6.9.10.8+dfsg-1ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-4988-1"],"notices":[{"id":"USN-4988-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-06-15T11:11:56.013753","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"groovy":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","description":"Image manipulation programs and library","is_source":true},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu13.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu13.3","pocket":"security"}],"focal":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","description":"Image manipulation programs and library","is_source":true},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.10.23+dfsg-2.1ubuntu11.4","pocket":"security"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.11","description":"Image manipulation programs and library","is_source":true},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-27757","CVE-2020-27771","CVE-2017-14528","CVE-2020-27763","CVE-2020-27758","CVE-2020-27754","CVE-2020-27776","CVE-2020-25674","CVE-2020-27770","CVE-2020-27773","CVE-2020-27750","CVE-2020-25665","CVE-2021-20176","CVE-2020-27765","CVE-2020-27774","CVE-2020-27775","CVE-2020-27751","CVE-2020-27764","CVE-2020-27769","CVE-2020-27767","CVE-2020-25666","CVE-2020-27755","CVE-2020-19667","CVE-2020-27768","CVE-2020-27772","CVE-2020-27761","CVE-2020-25675","CVE-2020-27760","CVE-2020-27762","CVE-2020-25676","CVE-2020-27753","CVE-2020-27766","CVE-2020-27759","CVE-2020-27756"]}]},{"id":"CVE-2017-9798","published":"2017-09-18T00:00:00","updated_at":"2025-08-25T22:42:09.396363+00:00","description":"\nApache httpd allows remote attackers to read secret data from process\nmemory if the Limit directive can be set in a user's .htaccess file, or if\nhttpd.conf has certain misconfigurations, aka Optionsbleed. This affects\nthe Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The\nattacker sends an unauthenticated OPTIONS HTTP request when attempting to\nread secret data. This is a use-after-free issue and thus secret data is\nnot always sent, and the specific data depends on many factors including\nconfiguration. Exploitation with .htaccess can be blocked with a patch to\nthe ap_limit_section function in server/core.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html","https://github.com/hannob/optionsbleed","https://ubuntu.com/security/notices/USN-3425-1","https://ubuntu.com/security/notices/USN-3425-2","https://www.cve.org/CVERecord?id=CVE-2017-9798"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876109"],"patches":{"apache2":["upstream: https://svn.apache.org/viewvc?view=revision&revision=1807754"]},"tags":{},"packages":[{"name":"apache2","source":"https://ubuntu.com/security/cve?package=apache2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apache2","debian":"https://tracker.debian.org/pkg/apache2","statuses":[{"release_codename":"artful","status":"released","description":"2.4.27-2ubuntu3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.4.7-1ubuntu4.18","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.4.18-2ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"2.4.25-3ubuntu2.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-3425-2","USN-3425-1"],"notices":[{"id":"USN-3425-2","title":"Apache HTTP Server vulnerability","summary":"Apache HTTP Server could be made to expose sensitive information over the\nnetwork.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-24T18:11:30.861139","description":"USN-3425-1 fixed a vulnerability in Apache HTTP Server. This update\nprovides the corresponding update for Ubuntu 12.04 ESM.\n\nOriginal advisory details:\n\n Hanno Böck discovered that the Apache HTTP Server incorrectly handled\n Limit directives in .htaccess files. In certain configurations, a remote\n attacker could possibly use this issue to read arbitrary server memory,\n including sensitive information. This issue is known as Optionsbleed.\n","is_hidden":false,"release_packages":{"precise":[{"name":"apache2","version":"2.2.22-1ubuntu1.14","description":"Apache HTTP server","is_source":true},{"name":"apache2.2-bin","version":"2.2.22-1ubuntu1.14","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.2.22-1ubuntu1.14"}]},"type":"USN","cves_ids":["CVE-2017-9798"]},{"id":"USN-3425-1","title":"Apache HTTP Server vulnerability","summary":"Apache HTTP Server could be made to expose sensitive information over the\nnetwork.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-09-19T16:53:45.113346","description":"Hanno Böck discovered that the Apache HTTP Server incorrectly handled\nLimit directives in .htaccess files. In certain configurations, a remote\nattacker could possibly use this issue to read arbitrary server memory,\nincluding sensitive information. This issue is known as Optionsbleed.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"apache2","version":"2.4.7-1ubuntu4.18","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-bin","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-data","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-dev","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-doc","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-mpm-event","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-mpm-itk","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-mpm-prefork","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-mpm-worker","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-suexec","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2-utils","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"apache2.2-bin","version":"2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"libapache2-mod-macro","version":"1:2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"},{"name":"libapache2-mod-proxy-html","version":"1:2.4.7-1ubuntu4.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.7-1ubuntu4.18","pocket":"security"}],"xenial":[{"name":"apache2","version":"2.4.18-2ubuntu3.5","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-bin","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-data","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-dev","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-doc","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"},{"name":"apache2-utils","version":"2.4.18-2ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.18-2ubuntu3.5","pocket":"security"}],"zesty":[{"name":"apache2","version":"2.4.25-3ubuntu2.3","description":"Apache HTTP server","is_source":true},{"name":"apache2-bin","version":"2.4.25-3ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.25-3ubuntu2.3"}]},"type":"USN","cves_ids":["CVE-2017-9798"]}]},{"id":"CVE-2017-14504","published":"2017-09-17T19:29:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the\ncorrect number of colors for the XV 332 format, leading to a NULL Pointer\nDereference.","ubuntu_description":"\nIt was discovered that GraphicsMagick incorrectly handled certain image\nfiles. An attacker could possibly use this issue to cause a denial of\nservice or other unspecified impact.","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=fb09ca6dd22c","https://sourceforge.net/p/graphicsmagick/bugs/465/","https://sourceforge.net/p/graphicsmagick/bugs/466/","https://ubuntu.com/security/notices/USN-4232-1","https://www.cve.org/CVERecord?id=CVE-2017-14504"],"bugs":[""],"patches":{"graphicsmagick":[]},"tags":{},"packages":[{"name":"graphicsmagick","source":"https://ubuntu.com/security/cve?package=graphicsmagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=graphicsmagick","debian":"https://tracker.debian.org/pkg/graphicsmagick","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.3.23-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.3.26-11","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.3.18-1ubuntu3.1+esm4","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-4232-1"],"notices":[{"id":"USN-4232-1","title":"GraphicsMagick vulnerabilities","summary":"Several security issues were fixed in GraphicsMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-01-08T17:42:19.392930","description":"It was discovered that GraphicsMagick incorrectly handled certain image files.\nAn attacker could possibly use this issue to cause a denial of service or other\nunspecified impact.\n","is_hidden":false,"release_packages":{"xenial":[{"name":"graphicsmagick","version":"1.3.23-1ubuntu0.4","description":"collection of image processing tools","is_source":true},{"name":"graphicsmagick","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"graphicsmagick-imagemagick-compat","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"graphicsmagick-libmagick-dev-compat","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"libgraphics-magick-perl","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"libgraphicsmagick++-q16-12","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"libgraphicsmagick++1-dev","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"libgraphicsmagick-q16-3","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"},{"name":"libgraphicsmagick1-dev","version":"1.3.23-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/graphicsmagick","version_link":"https://launchpad.net/ubuntu/+source/graphicsmagick/1.3.23-1ubuntu0.4","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-14165","CVE-2017-14314","CVE-2017-14504","CVE-2017-14649","CVE-2017-14733","CVE-2017-14994","CVE-2017-14997","CVE-2017-15277","CVE-2017-15930","CVE-2017-16352","CVE-2017-16353"]}]},{"id":"CVE-2017-14500","published":"2017-09-17T05:29:00","updated_at":"2025-08-25T22:25:28.969268+00:00","description":"\nImproper Neutralization of Special Elements used in an OS Command in the\npodcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows\nremote attackers to perform user-assisted code execution by crafting an RSS\nitem with a media enclosure (i.e., a podcast file) that includes shell\nmetacharacters in its filename, related to pb_controller.cpp and\nqueueloader.cpp, a different vulnerability than CVE-2017-12904.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://openwall.com/lists/oss-security/2017/09/16/1","https://www.cve.org/CVERecord?id=CVE-2017-14500","https://ubuntu.com/security/notices/USN-4585-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876004","https://github.com/akrennmair/newsbeuter/issues/598"],"patches":{"newsbeuter":["upstream: https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333","upstream: https://github.com/akrennmair/newsbeuter/commit/c8fea2f60c18ed30bdd1bb6f798e994e51a58260"]},"tags":{},"packages":[{"name":"newsbeuter","source":"https://ubuntu.com/security/cve?package=newsbeuter","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=newsbeuter","debian":"https://tracker.debian.org/pkg/newsbeuter","statuses":[{"release_codename":"xenial","status":"released","description":"2.9-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"2.9-6","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2.9-6","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"2.9-6","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"2.9-6","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.9-7","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"2.9-5+deb9u2build0.17.04.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":["USN-4585-1"],"notices":[{"id":"USN-4585-1","title":"Newsbeuter vulnerabilities","summary":"Newsbeuter could be made to crash or run programs as your login if it\nopened a malicious file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-10-15T22:14:26.123025","description":"It was discovered that Newsbeuter didn't handle the command line input\nproperly. An remote attacker could use it to ran remote code by crafting\na special input file. (CVE-2017-12904)\n\nIt was discovered that Newsbeuter didn't handle metacharacters in its\nfilename properly. An remote attacker could use it to ran remote code by\ncrafting a special filename. (CVE-2017-14500)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"newsbeuter","version":"2.9-3ubuntu0.1","description":"open-source RSS/Atom feed reader for text terminals","is_source":true},{"name":"newsbeuter","version":"2.9-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/newsbeuter","version_link":"https://launchpad.net/ubuntu/+source/newsbeuter/2.9-3ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-12904","CVE-2017-14500"]}]},{"id":"CVE-2017-14533","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"not fixing memory leak in trusty and xenial"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3681-1","https://www.cve.org/CVERecord?id=CVE-2017-14533"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/648"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/bdfc5538051ad0d1c2083ba2a29180ff6abea907"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.9.9.34+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-3681-1"],"notices":[{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-14532","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in\ncoders/tiff.c.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"code not present in trusty"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3681-1","https://www.cve.org/CVERecord?id=CVE-2017-14532"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/719","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878541"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/c55fb18c3f78445d100a378ab8b3c0acd53c6590"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.9.9.34+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":["USN-3681-1"],"notices":[{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-14531","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in\ncoders/sun.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3681-1","https://www.cve.org/CVERecord?id=CVE-2017-14531"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/718"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/1385a09732c261f1f403a9af6700979ca56c76d3"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.9.9.34+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-3681-1"],"notices":[{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-14520","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nIn Poppler 0.59.0, a floating point exception occurs in\nSplash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack\nwhen handling malicious PDF files.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3440-1","https://www.cve.org/CVERecord?id=CVE-2017-14520"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876081","https://bugs.freedesktop.org/show_bug.cgi?id=102719"],"patches":{"poppler":["upstream: https://cgit.freedesktop.org/poppler/poppler/commit/?id=504b3590182175390f474657a372e78fb1508262"]},"tags":{},"packages":[{"name":"poppler","source":"https://ubuntu.com/security/cve?package=poppler","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poppler","debian":"https://tracker.debian.org/pkg/poppler","statuses":[{"release_codename":"trusty","status":"released","description":"0.24.5-2ubuntu4.7","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.41.0-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"0.48.0-2ubuntu2.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-3440-1"],"notices":[{"id":"USN-3440-1","title":"poppler vulnerabilities","summary":"Several security issues were fixed in poppler.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-06T14:47:11.058898","description":"It was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a\ncrafted PDF file, an attacker could cause a denial of service.\n(CVE-2017-14518, CVE-2017-14520, CVE-2017-14617, CVE-2017-14929,\nCVE-2017-14975, CVE-2017-14977)\n\nIt was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a crafted\nPDF file, an attacker could cause a denial of service. This issue\nonly affected Ubuntu 17.04 and 16.04. (CVE-2017-14926, CVE-2017-14928)\n\nAlberto Garcia, Francisco Oca and Suleman Ali discovered that Poppler\nincorrectly handled certain files. If a user or automated system were\ntricked into opening a crafted PDF file, an attacker could cause a\ndenial of service. (CVE-2017-9776)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"poppler","version":"0.24.5-2ubuntu4.7","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib8","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler44","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"poppler-utils","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"}],"xenial":[{"name":"poppler","version":"0.41.0-0ubuntu1.4","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib8","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler58","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"poppler-utils","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"}],"zesty":[{"name":"poppler","version":"0.48.0-2ubuntu2.3","description":"PDF rendering library","is_source":true},{"name":"libpoppler64","version":"0.48.0-2ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.3"},{"name":"poppler-utils","version":"0.48.0-2ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.3"}]},"type":"USN","cves_ids":["CVE-2017-14518","CVE-2017-14520","CVE-2017-14617","CVE-2017-14926","CVE-2017-14928","CVE-2017-14929","CVE-2017-14975","CVE-2017-14977","CVE-2017-9776"]}]},{"id":"CVE-2017-14519","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nIn Poppler 0.59.0, memory corruption occurs in a call to\nObject::streamGetChar in Object.h after a repeating series of Gfx::display,\nGfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a\nGfx.cc infinite loop).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3433-1","https://www.cve.org/CVERecord?id=CVE-2017-14519"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876086","https://bugs.freedesktop.org/show_bug.cgi?id=102701"],"patches":{"poppler":["upstream: https://cgit.freedesktop.org/poppler/poppler/commit/?id=aaf5327649e8f7371c9d3270e7813c43ddfd47ee"]},"tags":{},"packages":[{"name":"poppler","source":"https://ubuntu.com/security/cve?package=poppler","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poppler","debian":"https://tracker.debian.org/pkg/poppler","statuses":[{"release_codename":"trusty","status":"released","description":"0.24.5-2ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.41.0-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"0.48.0-2ubuntu2.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-3433-1"],"notices":[{"id":"USN-3433-1","title":"poppler vulnerabilities","summary":"poppler could be made to crash if opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-02T14:35:50.172781","description":"It was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a\ncrafted PDF file, an attacker could cause a denial service.\nThis issue only affected Ubuntu 17.04. (CVE-2017-14517)\n\nIt was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a crafted PDF file,\nan attacker could cause a denial of service. (CVE-2017-14519)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"poppler","version":"0.24.5-2ubuntu4.6","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib8","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler44","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"poppler-utils","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"}],"xenial":[{"name":"poppler","version":"0.41.0-0ubuntu1.3","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib8","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler58","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"poppler-utils","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"}],"zesty":[{"name":"poppler","version":"0.48.0-2ubuntu2.2","description":"PDF rendering library","is_source":true},{"name":"libpoppler64","version":"0.48.0-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.2"},{"name":"poppler-utils","version":"0.48.0-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.2"}]},"type":"USN","cves_ids":["CVE-2017-14517","CVE-2017-14519"]}]},{"id":"CVE-2017-14518","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nIn Poppler 0.59.0, a floating point exception exists in the\nisImageInterpolationRequired() function in Splash.cc via a crafted PDF\ndocument.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3440-1","https://www.cve.org/CVERecord?id=CVE-2017-14518"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876082","https://bugs.freedesktop.org/show_bug.cgi?id=102688"],"patches":{"poppler":["upstream: https://cgit.freedesktop.org/poppler/poppler/commit/?id=80f9819b6233f9f9b5fd44f0e4cad026e5d048c2"]},"tags":{},"packages":[{"name":"poppler","source":"https://ubuntu.com/security/cve?package=poppler","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poppler","debian":"https://tracker.debian.org/pkg/poppler","statuses":[{"release_codename":"trusty","status":"released","description":"0.24.5-2ubuntu4.7","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.41.0-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"0.48.0-2ubuntu2.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-3440-1"],"notices":[{"id":"USN-3440-1","title":"poppler vulnerabilities","summary":"Several security issues were fixed in poppler.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-06T14:47:11.058898","description":"It was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a\ncrafted PDF file, an attacker could cause a denial of service.\n(CVE-2017-14518, CVE-2017-14520, CVE-2017-14617, CVE-2017-14929,\nCVE-2017-14975, CVE-2017-14977)\n\nIt was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a crafted\nPDF file, an attacker could cause a denial of service. This issue\nonly affected Ubuntu 17.04 and 16.04. (CVE-2017-14926, CVE-2017-14928)\n\nAlberto Garcia, Francisco Oca and Suleman Ali discovered that Poppler\nincorrectly handled certain files. If a user or automated system were\ntricked into opening a crafted PDF file, an attacker could cause a\ndenial of service. (CVE-2017-9776)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"poppler","version":"0.24.5-2ubuntu4.7","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-glib8","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"libpoppler44","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"},{"name":"poppler-utils","version":"0.24.5-2ubuntu4.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.7","pocket":"security"}],"xenial":[{"name":"poppler","version":"0.41.0-0ubuntu1.4","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-glib8","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"libpoppler58","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"},{"name":"poppler-utils","version":"0.41.0-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.4","pocket":"security"}],"zesty":[{"name":"poppler","version":"0.48.0-2ubuntu2.3","description":"PDF rendering library","is_source":true},{"name":"libpoppler64","version":"0.48.0-2ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.3"},{"name":"poppler-utils","version":"0.48.0-2ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.3"}]},"type":"USN","cves_ids":["CVE-2017-14518","CVE-2017-14520","CVE-2017-14617","CVE-2017-14926","CVE-2017-14928","CVE-2017-14929","CVE-2017-14975","CVE-2017-14977","CVE-2017-9776"]}]},{"id":"CVE-2017-14517","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nIn Poppler 0.59.0, a NULL Pointer Dereference exists in the\nXRef::parseEntry() function in XRef.cc via a crafted PDF document.","ubuntu_description":"","notes":[{"author":"leosilva","note":"couldn't reproduce in trusty or xenial using POC"}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3433-1","https://www.cve.org/CVERecord?id=CVE-2017-14517"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876079","https://bugs.freedesktop.org/show_bug.cgi?id=102687"],"patches":{"poppler":["upstream: https://cgit.freedesktop.org/poppler/poppler/commit/?id=476394e7a025e02e4897da2e765df2c895d0708f"]},"tags":{},"packages":[{"name":"poppler","source":"https://ubuntu.com/security/cve?package=poppler","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poppler","debian":"https://tracker.debian.org/pkg/poppler","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"not reproducible","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"0.48.0-2ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [not reproducible]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3433-1"],"notices":[{"id":"USN-3433-1","title":"poppler vulnerabilities","summary":"poppler could be made to crash if opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-10-02T14:35:50.172781","description":"It was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a\ncrafted PDF file, an attacker could cause a denial service.\nThis issue only affected Ubuntu 17.04. (CVE-2017-14517)\n\nIt was discovered that Poppler incorrectly handled certain files.\nIf a user or automated system were tricked into opening a crafted PDF file,\nan attacker could cause a denial of service. (CVE-2017-14519)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"poppler","version":"0.24.5-2ubuntu4.6","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-glib8","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"libpoppler44","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"},{"name":"poppler-utils","version":"0.24.5-2ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.6","pocket":"security"}],"xenial":[{"name":"poppler","version":"0.41.0-0ubuntu1.3","description":"PDF rendering library","is_source":true},{"name":"gir1.2-poppler-0.18","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-cpp-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-cpp0","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib-doc","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-glib8","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-private-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt4-4","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt4-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt5-1","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler-qt5-dev","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"libpoppler58","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"},{"name":"poppler-utils","version":"0.41.0-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.41.0-0ubuntu1.3","pocket":"security"}],"zesty":[{"name":"poppler","version":"0.48.0-2ubuntu2.2","description":"PDF rendering library","is_source":true},{"name":"libpoppler64","version":"0.48.0-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.2"},{"name":"poppler-utils","version":"0.48.0-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/poppler","version_link":"https://launchpad.net/ubuntu/+source/poppler/0.48.0-2ubuntu2.2"}]},"type":"USN","cves_ids":["CVE-2017-14517","CVE-2017-14519"]}]},{"id":"CVE-2017-14505","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:33.731470+00:00","description":"\nDrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1\nmishandles certain NULL arrays, which allows attackers to perform Denial of\nService (NULL pointer dereference and application crash in\nAcquireQuantumMemory within MagickCore/memory.c) by providing a crafted\nImage File as input.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"0320-CVE-2017-14505-Fix-DoS-NULL-pointer-dereference-in-DrawGetStrokeDashArray.patch in wheezy"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3681-1","https://www.cve.org/CVERecord?id=CVE-2017-14505"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/716","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878545"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/f7b0cf098bc800c5b6181dc522a99997bfee8948"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.9.9.34+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-3681-1"],"notices":[{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-14503","published":"2017-09-17T00:00:00","updated_at":"2025-08-25T22:25:28.969268+00:00","description":"\nlibarchive 3.3.2 suffers from an out-of-bounds read within\nlha_read_data_none() in archive_read_support_format_lha.c when extracting a\nspecially crafted lha archive, related to lha_crc16.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3736-1","https://www.cve.org/CVERecord?id=CVE-2017-14503"],"bugs":["https://github.com/libarchive/libarchive/issues/948","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875960"],"patches":{"libarchive":["upstream: https://github.com/libarchive/libarchive/commit/2c8c83b9731ff822fad6cc8c670ea5519c366a14"]},"tags":{},"packages":[{"name":"libarchive","source":"https://ubuntu.com/security/cve?package=libarchive","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libarchive","debian":"https://tracker.debian.org/pkg/libarchive","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.2.2-3.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.2.2-5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.1.2-7ubuntu2.6","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"3.1.2-11ubuntu0.16.04.4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3736-1"],"notices":[{"id":"USN-3736-1","title":"libarchive vulnerabilities","summary":"Several security issues were fixed in libarchive.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-08-13T14:16:01.812657","description":"It was discovered that libarchive incorrectly handled certain archive files.\nA remote attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.\n(CVE-2016-10209, CVE-2016-10349, CVE-2016-10350)\n\nAgostino Sarubbo discovered that libarchive incorrectly handled certain XAR files.\nA remote attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.\n(CVE-2017-14166)\n\nIt was discovered that libarchive incorrectly handled certain files.\nA remote attacker could possibly use this issue to get access to sensitive\ninformation. (CVE-2017-14501, CVE-2017-14503)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"libarchive","version":"3.2.2-3.1ubuntu0.1","description":"Library to read/write archive files","is_source":true},{"name":"bsdcpio","version":"3.2.2-3.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.1","pocket":"security"},{"name":"bsdtar","version":"3.2.2-3.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.1","pocket":"security"},{"name":"libarchive-dev","version":"3.2.2-3.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.1","pocket":"security"},{"name":"libarchive-tools","version":"3.2.2-3.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.1","pocket":"security"},{"name":"libarchive13","version":"3.2.2-3.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.1","pocket":"security"}],"trusty":[{"name":"libarchive","version":"3.1.2-7ubuntu2.6","description":"Library to read/write archive files","is_source":true},{"name":"bsdcpio","version":"3.1.2-7ubuntu2.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.6","pocket":"security"},{"name":"bsdtar","version":"3.1.2-7ubuntu2.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.6","pocket":"security"},{"name":"libarchive-dev","version":"3.1.2-7ubuntu2.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.6","pocket":"security"},{"name":"libarchive13","version":"3.1.2-7ubuntu2.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.6","pocket":"security"}],"xenial":[{"name":"libarchive","version":"3.1.2-11ubuntu0.16.04.4","description":"Library to read/write archive files","is_source":true},{"name":"bsdcpio","version":"3.1.2-11ubuntu0.16.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.4","pocket":"security"},{"name":"bsdtar","version":"3.1.2-11ubuntu0.16.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.4","pocket":"security"},{"name":"libarchive-dev","version":"3.1.2-11ubuntu0.16.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.4","pocket":"security"},{"name":"libarchive13","version":"3.1.2-11ubuntu0.16.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libarchive","version_link":"https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.4","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-10209","CVE-2016-10349","CVE-2016-10350","CVE-2017-14166","CVE-2017-14501","CVE-2017-14503"]}]}],"offset":55360,"limit":20,"total_results":79316}