The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03152-1 advisory.

    - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate     alpha channels       (bsc#1248076).
    - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077).
    - CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage     (bsc#1248078).
    - CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079).
    - CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing     only a colon to       `montage -geometry` (bsc#1248767).
    - CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780).
    - CVE-2025-57803: Fixed heap out-of-bounds (OOB) write due to 32-bit integer overflow (bsc#1248784).

    Other fixes:

    - Fixed output file placeholders (bsc#1247475).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03150-1 advisory.

    - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077).
    - CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage     (bsc#1248078).
    - CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079).
    - CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing     only a colon to       `montage -geometry` (bsc#1248767).
    - CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780).
    - CVE-2025-57803: Fixed heap out-of-bounds (OOB) write due to 32-bit integer overflow (bsc#1248784).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03164-1 advisory.

    - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate     alpha channels       (bsc#1248076).
    - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077).
    - CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage     (bsc#1248078).
    - CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079).
    - CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing     only a colon to       `montage -geometry` (bsc#1248767).
    - CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780).
    - CVE-2025-57803: Fixed heap out-of-bounds (OOB) write due to 32-bit integer overflow (bsc#1248784).

    Other fixes:

    - Fixed output file placeholders (bsc#1247475).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7756-1 advisory.

    It was discovered that ImageMagick did not properly handle memory when performing magnified size     calculations. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a     denial of service, or possibly execute arbitrary code. (CVE-2025-55154)

    Woojin Park, Hojun Lee, Youngin Won, and Siyeon Han discovered that ImageMagick incorrectly handled     creating thumbnail images for certain dimensions. An attacker could possibly use this issue to cause     ImageMagick to crash, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS.
    (CVE-2025-55212)

    Lumina Mescuwa discovered that ImageMagick did not properly handle cloning splay trees in the MagickCore     library. An attacker could possibly use this issue to cause sanitized builds of ImageMagick to crash,     resulting in a denial of service. (CVE-2025-55160)

    Lumina Mescuwa discovered that ImageMagick did not properly handle memory. An attacker could possibly use     this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2025-57807)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
264508	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2025:03152-1)	Nessus	SuSE Local Security Checks	2025/9/11	2025/9/11	high
264512	SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2025:03150-1)	Nessus	SuSE Local Security Checks	2025/9/11	2025/9/11	high
264612	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ImageMagick (SUSE-SU-2025:03164-1)	Nessus	SuSE Local Security Checks	2025/9/12	2025/9/12	high
265697	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : ImageMagick vulnerabilities (USN-7756-1)	Nessus	Ubuntu Local Security Checks	2025/9/22	2026/1/21	critical

检测

插件搜索

high

high

high

critical