Vulnerability CVE-2018-9133

Vulnerability Name:

CVE-2018-9133 (CCN-141069)

Assigned:

2018-03-29

Published:

2018-03-29

Updated:

2020-08-19

Summary:

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

3.3 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
2.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

3.3 Low (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
2.9 Low (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

1.7 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-834
CWE-835

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2018-9133

Source: XF
Type: UNKNOWN
imagemagick-cve20189133-dos(141069)

Source: CCN
Type: ImageMagick GIT Repository
Excessive iteration in DecodeLabImage and EncodeLabImage (src/coders/tiff.c) #1072

Source: MISC
Type: Exploit, Issue Tracking, Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1072

Source: MLIST
Type: UNKNOWN
[debian-lts-announce] 20200818 [SECURITY] [DLA 2333-1] imagemagick security update

Source: UBUNTU
Type: Third Party Advisory
USN-3681-1

Source: CCN
Type: IBM Security Bulletin 6335281 (Data Risk Manager)
IBM Data Risk Manager is affected by multiple vulnerabilities

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2018-9133

Vulnerable Configuration:

Configuration 1:

cpe:/a:imagemagick:imagemagick:7.0.7-26:q16:*:*:*:*:*:*

Configuration 2:

cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:7::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/a:imagemagick:imagemagick:7.0.7-26:q16:*:*:*:*:*:*

AND

cpe:/a:ibm:data_risk_manager:2.0.6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8191	P	Security update for terraform-provider-helm (Important) (in QA)	2023-06-20
oval:org.opensuse.security:def:8053	P	perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.13.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8061	P	python3-tools-3.6.15-150300.10.45.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8176	P	Security update for php7 (Moderate) (in QA)	2023-06-15
oval:org.opensuse.security:def:8083	P	libncurses5-32bit-6.1-150000.5.15.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:8129	P	Security update for MozillaFirefox (Important)	2023-06-12
oval:org.opensuse.security:def:20189133	V	CVE-2018-9133	2022-09-02
oval:org.opensuse.security:def:6353	P	Security update for freerdp (Important)	2022-08-25
oval:org.opensuse.security:def:6132	P	Security update for wavpack (Low)	2022-08-05
oval:org.opensuse.security:def:43649	P	Security update for mozilla-nss (Important)	2022-07-22
oval:org.opensuse.security:def:123604	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:2999	P	ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:124117	P	libMagickCore-6_Q16-1-6.8.8.1-71.85.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3419	P	ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:6057	P	Security update for postgresql12 (Important)	2022-05-27
oval:org.opensuse.security:def:6038	P	Security update for curl (Moderate)	2022-05-16
oval:org.opensuse.security:def:6331	P	Security update for the Linux Kernel (Important)	2022-05-16
oval:org.opensuse.security:def:6023	P	Security update for java-11-openjdk (Important)	2022-04-29
oval:org.opensuse.security:def:6323	P	Security update for yaml-cpp (Moderate)	2022-04-01
oval:org.opensuse.security:def:6199	P	Security update for atftp (Low)	2022-03-16
oval:org.opensuse.security:def:6190	P	Security update for webkit2gtk3 (Important)	2022-03-11
oval:org.opensuse.security:def:10440	P	Security update for MozillaFirefox (Important) (in QA)	2022-01-14
oval:org.opensuse.security:def:6157	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:45258	P	Security update for python-pip (Moderate)	2022-01-03
oval:org.opensuse.security:def:11164	P	Security update for postrsd (Moderate)	2021-12-30
oval:org.opensuse.security:def:5930	P	Security update for log4j (Moderate)	2021-12-30
oval:org.opensuse.security:def:9890	P	Security update for xorg-x11-server (Important)	2021-12-21
oval:org.opensuse.security:def:10191	P	Security update for fetchmail (Moderate)	2021-12-14
oval:org.opensuse.security:def:8401	P	Security update for the Linux Kernel (Important)	2021-12-06
oval:org.opensuse.security:def:10183	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:5908	P	Security update for xen (Moderate)	2021-12-03
oval:org.opensuse.security:def:5900	P	Security update for netcdf (Important)	2021-11-30
oval:org.opensuse.security:def:6461	P	Security update for java-1_8_0-openjdk (Important)	2021-11-23
oval:org.opensuse.security:def:7282	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:59562	P	Security update for MozillaFirefox (Important)	2021-11-17
oval:org.opensuse.security:def:8374	P	Security update for samba (Important)	2021-11-10
oval:org.opensuse.security:def:6221	P	Security update for tinyxml (Low)	2021-11-09
oval:org.opensuse.security:def:11142	P	Security update for chromium (Important)	2021-10-26
oval:org.opensuse.security:def:6208	P	Security update for ncurses (Moderate)	2021-10-20
oval:org.opensuse.security:def:21839	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:6480	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:61510	P	libcroco-0.6.12-2.38 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:38275	P	Security update for openssl (Low)	2021-09-18
oval:org.opensuse.security:def:59540	P	Security update for transfig (Moderate)	2021-09-16
oval:org.opensuse.security:def:11128	P	Security update for nextcloud (Important)	2021-09-13
oval:org.opensuse.security:def:10340	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:9034	P	Security update for openssl-1_1 (Low)	2021-09-07
oval:org.opensuse.security:def:10147	P	Security update for xerces-c (Important)	2021-09-02
oval:org.opensuse.security:def:11115	P	Security update for prosody (Moderate)	2021-08-21
oval:org.opensuse.security:def:10321	P	Security update for libass (Important)	2021-08-20
oval:org.opensuse.security:def:8325	P	Security update for haproxy (Important)	2021-08-17
oval:org.opensuse.security:def:8633	P	Security update for libsndfile (Critical)	2021-08-17
oval:org.opensuse.security:def:9012	P	Security update for c-ares (Important)	2021-08-17
oval:org.opensuse.security:def:14818	P	ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47447	P	mozilla-nspr-32bit-4.13.1-18.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48156	P	libnetpbm11-10.66.3-8.7.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47518	P	unixODBC-2.3.4-6.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47938	P	ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48210	P	libudisks2-0-2.1.3-3.5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:46992	P	libXfixes3-32bit-5.0.1-3.53 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:87707	P	libMagickCore-6_Q16-1-6.8.8.1-71.85.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47206	P	apache2-mod_nss-1.0.14-18.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47352	P	libgypsy0-0.9-6.22 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47290	P	ipsec-tools-0.8.0-18.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14546	P	libMagickCore-6_Q16-1-6.8.8.1-71.85.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47416	P	libtag1-1.9.1-1.218 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47666	P	libMagickCore-6_Q16-1-6.8.8.1-71.85.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:63101	P	postgresql12-12.6-8.16.1 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62107	P	kernel-64kb-5.3.18-57.3 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62766	P	libSDL-1_2-0-1.2.15-3.12.73 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:63000	P	cross-nvptx-gcc7-7.5.0+r278197-4.25.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62317	P	rpm-32bit-4.14.1-29.46 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:10122	P	Security update for dbus-1 (Important)	2021-07-27
oval:org.opensuse.security:def:8624	P	Security update for dbus-1 (Important)	2021-07-27
oval:org.opensuse.security:def:10306	P	Security update for curl (Moderate)	2021-07-21
oval:org.opensuse.security:def:11106	P	Security update for fossil (Important)	2021-07-21
oval:org.opensuse.security:def:44380	P	Security update for MozillaFirefox (Important)	2021-07-16
oval:org.opensuse.security:def:44435	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:8615	P	Security update for arpwatch (Important)	2021-06-28
oval:org.opensuse.security:def:61080	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:38072	P	Security update for apache2 (Important)	2021-06-17
oval:org.opensuse.security:def:61318	P	opensc-0.17.0-1.30 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46622	P	bash-4.2-75.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124390	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36304	P	system-config-printer-1.0.8-9.23.44 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12539	P	libecpg6-10.5-1.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12341	P	rpm-32bit-4.11.2-15.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12389	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:62868	P	patch-2.7.6-3.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61317	P	mutt-1.9.1-1.49 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61341	P	python2-numpy-1.14.0-2.25 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46754	P	libpango-1_0-0-1.36.3-4.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12375	P	xen-4.9.0_08-2.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:8361	P	Security update for the Linux Kernel (Important)	2021-06-08
oval:org.opensuse.security:def:36303	P	sysstat-8.1.5-7.50.25 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36315	P	unzip-6.00-11.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:16384	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61118	P	aaa_base-84.87+git20180409.04c9dae-1.8 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12356	P	syslog-service-2.0-778.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:124682	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36576	P	trousers-devel-0.3.10-0.11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61161	P	firewall-macros-0.5.3-2.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:77685	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46845	P	squashfs-4.3-1.15 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12450	P	g3utils-1.1.36-58.3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36399	P	fastjar-0.95-1.24.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11685	P	pam_krb5-2.4.4-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61211	P	libXinerama-devel-1.1.3-1.22 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48890	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36575	P	texlive-2007-219.34.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36587	P	xorg-x11-libXp-devel-32bit-7.4-1.18.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12218	P	libjson-c2-0.11-2.22 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12226	P	libmikmod3-3.2.0-4.59 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:61241	P	libjasper4-2.0.14-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12475	P	gstreamer-plugins-base-1.8.3-12.11 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36535	P	perl-DBD-Pg-2.10.3-1.20.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11707	P	python-requests-2.3.0-6.5.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:60282	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:12517	P	libXi6-1.7.4-17.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11766	P	bind-libs-32bit-9.9.9P1-46.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12248	P	libpng15-15-1.5.22-9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17221	P	ImageMagick-6.8.8.1-71.85.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46430	P	gnutls-3.2.15-1.4 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12526	P	libXvMC1-1.0.8-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11788	P	dbus-1-glib-0.100.2-3.58 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12294	P	libz1-1.2.8-11.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:55183	P	Security update for avahi (Important)	2021-06-03
oval:org.opensuse.security:def:10259	P	Security update for lz4 (Important)	2021-05-19
oval:org.opensuse.security:def:8582	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:26042	P	Security update for cups (Important)	2021-04-30
oval:org.opensuse.security:def:59722	P	Security update for permissions (Important)	2021-04-29
oval:org.opensuse.security:def:8355	P	Security update for samba (Important)	2021-04-29
oval:org.opensuse.security:def:6881	P	Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)	2021-04-28
oval:org.opensuse.security:def:9306	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:8557	P	Security update for zstd (Moderate)	2021-04-08
oval:org.opensuse.security:def:5976	P	Security update for clamav-database (Important)	2021-03-15
oval:org.opensuse.security:def:10415	P	Security update for python (Moderate)	2021-03-11
oval:org.opensuse.security:def:60475	P	Security update for git (Important)	2021-03-09
oval:org.opensuse.security:def:10213	P	Security update for grub2 (Important)	2021-03-02
oval:org.opensuse.security:def:10211	P	Security update for java-1_8_0-ibm (Important)	2021-03-01
oval:org.opensuse.security:def:10198	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:6446	P	Security update for openldap2 (Moderate)	2021-01-14
oval:org.opensuse.security:def:8333	P	Security update for crmsh (Important)	2021-01-12
oval:org.opensuse.security:def:10189	P	Security update for tomcat (Moderate)	2021-01-07
oval:org.opensuse.security:def:8646	P	Security update for dovecot23 (Important)	2021-01-05
oval:org.opensuse.security:def:59539	P	Security update for tomcat (Moderate)	2021-01-05
oval:org.opensuse.security:def:11034	P	Security update for kdeconnect-kde (Important)	2020-12-29
oval:org.opensuse.security:def:60161	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:8352	P	Security update for the Linux Kernel (Important)	2020-12-10
oval:org.opensuse.security:def:11025	P	Security update for pngcheck (Moderate)	2020-12-10
oval:org.opensuse.security:def:6644	P	Security update for the Linux Kernel (Live Patch 18 for SLE 15) (Important)	2020-12-07
oval:org.opensuse.security:def:13177	P	shadow-4.2.1-34.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62636	P	gnome-shell-3.34.4+4-1.58 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17302	P	ImageMagick-6.8.8.1-71.126.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:13199	P	transfig-3.2.5e-2.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:3842	P	ImageMagick-6.8.8.1-71.126.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62962	P	libpcp-devel-4.3.1-3.8.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12812	P	ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:16678	P	ImageMagick-6.8.8.1-71.126.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61783	P	libHX-devel-3.22-1.26 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63051	P	libpmi0-18.08.5-1.30 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:61977	P	shadow-4.6-3.5.6 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:48971	P	ImageMagick-6.8.8.1-71.126.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17369	P	libtag1-32bit-1.9.1-1.265 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17377	P	libzzip-0-13-0.13.67-10.14.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:63134	P	clamsap-0.99.25-2.37 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:53659	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:53682	P	Security update for shim (Moderate)	2020-12-01
oval:org.opensuse.security:def:6399	P	liblzo2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24882	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:22275	P	Security update for libpcap (Important)	2020-12-01
oval:org.opensuse.security:def:60896	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:38314	P	libkpathsea6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10726	P	libcolord-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10734	P	libgcrypt-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37623	P	mozilla-nspr-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10013	P	wget on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36693	P	libsndfile1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54898	P	libnewt0_52 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17819	P	Security update for php7 (Important)	2020-12-01
oval:org.opensuse.security:def:17411	P	Security update for mozilla-nspr, mozilla-nss (Moderate)	2020-12-01
oval:org.opensuse.security:def:10945	P	id3lib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:44121	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:10983	P	libbz2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53620	P	Security update for dpdk (Moderate)	2020-12-01
oval:org.opensuse.security:def:6859	P	vino on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52578	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25021	P	Security update for openldap2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:38356	P	libpython2_7-1_0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10491	P	libdmx-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37434	P	fuse on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10871	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37608	P	libwireshark8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37620	P	memcached on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36908	P	libgudev-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8482	P	opie on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36943	P	libraptor2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8343	P	java-1_8_0-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:21847	P	Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:44004	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:11039	P	libosip2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38307	P	libjavascriptcoregtk-3_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55064	P	avahi on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54977	P	patch on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53822	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:24938	P	Security update for axis (Moderate)	2020-12-01
oval:org.opensuse.security:def:22314	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:38342	P	libotr5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38114	P	ImageMagick-config-6-SUSE on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43534	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10756	P	libmicrohttpd-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37759	P	ctags on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10028	P	zoo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37055	P	yast2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17831	P	Security update for quagga (Important)	2020-12-01
oval:org.opensuse.security:def:17496	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:44310	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:37051	P	xlockmore on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53701	P	Security update for freetype2 (Important)	2020-12-01
oval:org.opensuse.security:def:7304	P	ImageMagick-config-6-SUSE on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52751	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25171	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:38395	P	libvorbis-doc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10504	P	libicu-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39024	P	libFLAC++6-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10807	P	libvdpau-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10815	P	libyaml-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37704	P	xalan-j2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36965	P	libyaml-0-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37002	P	python on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22381	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:18491	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:21894	P	Security update for kernel-firmware (Important)	2020-12-01
oval:org.opensuse.security:def:59976	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:11064	P	libsmi-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55102	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55051	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54060	P	libreoffice on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53023	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:38386	P	libudisks2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43533	P	Security update for rrdtool (Low)	2020-12-01
oval:org.opensuse.security:def:43545	P	Security update for dracut (Moderate)	2020-12-01
oval:org.opensuse.security:def:10802	P	libtirpc-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37860	P	libXt6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10047	P	cyrus-sasl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37215	P	libjson-c2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17853	P	Security update for dovecot22 (Low)	2020-12-01
oval:org.opensuse.security:def:24602	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:24612	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:17553	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:37090	P	cron on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56459	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:9898	P	libopenssl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52857	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:6555	P	at on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25224	P	Security update for libqt5-qtbase (Important)	2020-12-01
oval:org.opensuse.security:def:38423	P	opensc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39066	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46297	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:10837	P	polkit-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37840	P	libICE6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38007	P	mutt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:22393	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:18517	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:52178	P	Security update for postgresql12 (Important)	2020-12-01
oval:org.opensuse.security:def:21993	P	Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:17620	P	Security update for libwmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:37323	P	rsync on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54233	P	libHX28 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53308	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:44486	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:11047	P	libpng16-compat-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39105	P	libjavascriptcoregtk-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10849	P	sane-backends-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37917	P	libmms0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37274	P	libxml2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25311	P	Security update for shim (Moderate)	2020-12-01
oval:org.opensuse.security:def:23061	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:24675	P	Security update for audiofile (Low)	2020-12-01
oval:org.opensuse.security:def:17584	P	Security update for libgcrypt (Moderate)	2020-12-01
oval:org.opensuse.security:def:37118	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56533	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:37528	P	libgypsy0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9920	P	libsqlite3-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54505	P	kernel-default on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6580	P	cvs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38467	P	qemu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46296	P	Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:46310	P	Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:10883	P	augeas-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37941	P	libpng15-15 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38167	P	dhcp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53508	P	Security update for xrdp (Important)	2020-12-01
oval:org.opensuse.security:def:22423	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:52177	P	Security update for fwupd (Moderate)	2020-12-01
oval:org.opensuse.security:def:52200	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:22057	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:17730	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:37362	P	xorg-x11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37800	P	gnome-settings-daemon on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36671	P	liblzo2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8448	P	libsrtp1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54339	P	ntp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8285	P	cups-filters on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53416	P	Security update for nodejs8 (Important)	2020-12-01
oval:org.opensuse.security:def:44515	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:39147	P	ImageMagick on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:43814	P	Security update for augeas (Low)	2020-12-01
oval:org.opensuse.security:def:10864	P	xorg-x11-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38088	P	update-alternatives on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6622	P	groff on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25325	P	Security update for freetype2 (Important)	2020-12-01
oval:org.opensuse.security:def:23090	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:53660	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:24801	P	Security update for postgresql96 (Important)	2020-12-01
oval:org.opensuse.security:def:22150	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:60776	P	Security update for libproxy (Important)	2020-12-01
oval:org.opensuse.security:def:37162	P	libQt5Concurrent5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37527	P	libgssglue1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37539	P	libjbig2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9966	P	perl-Tk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36636	P	libXi6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8210	P	sblim-sfcb on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54790	P	gpg2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6613	P	glib2-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:45210	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:10930	P	gnome-online-accounts-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37998	P	logrotate on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10958	P	libXdmcp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38226	P	java-11-openjdk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53582	P	Security update for binutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:26007	P	Security update for libid3tag (Moderate)	2020-12-01
oval:org.opensuse.security:def:52340	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:22097	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:17762	P	Security update for gdk-pixbuf (Moderate)	2020-12-01
oval:org.opensuse.security:def:10482	P	libapr-util1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37390	P	bash on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:9284	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37842	P	libMagickCore-6_Q16-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37609	P	libxcb-dri2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:36807	P	coolkey on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8463	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:36783	P	MozillaFirefox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:8310	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:60994	P	Security update for python-ipaddress (Important)	2020-12-01
oval:org.opensuse.security:def:44572	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:43929	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:10964	P	libXp-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38248	P	libXRes1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54990	P	puppet on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:6631	P	gtk2-data on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25369	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:com.redhat.rhsa:def:20201180	P	RHSA-2020:1180: ImageMagick security, bug fix, and enhancement update (Moderate)	2020-03-31
oval:org.opensuse.security:def:84886	P	Security update for ImageMagick (Moderate)	2018-06-29
oval:org.opensuse.security:def:79167	P	Security update for ImageMagick (Moderate)	2018-06-29
oval:com.ubuntu.artful:def:20189133000	V	CVE-2018-9133 on Ubuntu 17.10 (artful) - low.	2018-03-30
oval:com.ubuntu.bionic:def:20189133000	V	CVE-2018-9133 on Ubuntu 18.04 LTS (bionic) - low.	2018-03-30
oval:com.ubuntu.bionic:def:201891330000000	V	CVE-2018-9133 on Ubuntu 18.04 LTS (bionic) - low.	2018-03-30
oval:com.ubuntu.trusty:def:20189133000	V	CVE-2018-9133 on Ubuntu 14.04 LTS (trusty) - low.	2018-03-30
oval:com.ubuntu.xenial:def:201891330000000	V	CVE-2018-9133 on Ubuntu 16.04 LTS (xenial) - low.	2018-03-30
oval:com.ubuntu.xenial:def:20189133000	V	CVE-2018-9133 on Ubuntu 16.04 LTS (xenial) - low.	2018-03-30

BACK