Oval Definition:oval:org.opensuse.security:def:20231289
Revision Date:2023-06-22Version:1
Title:CVE-2023-1289
Description:

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2023-1289
SUSE CVE-2023-1289
SUSE-SU-2023:1733-1
SUSE-SU-2023:1734-1
SUSE-SU-2023:1756-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Module for Desktop Applications 15 SP5
SUSE Linux Enterprise Module for Development Tools 15 SP5
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP5
Product(s):
Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Development Tools 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND perl-PerlMagick-7.1.0.9-150400.6.18.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Desktop Applications 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND
  • ImageMagick-7.1.0.9-150400.6.18.1 is installed
  • OR ImageMagick-config-7-SUSE-7.1.0.9-150400.6.18.1 is installed
  • OR ImageMagick-config-7-upstream-7.1.0.9-150400.6.18.1 is installed
  • OR ImageMagick-devel-7.1.0.9-150400.6.18.1 is installed
  • OR libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.18.1 is installed
  • OR libMagick++-devel-7.1.0.9-150400.6.18.1 is installed
  • OR libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.18.1 is installed
  • OR libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.18.1 is installed
  • BACK