The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4334-1 advisory.

    - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696).
    - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711).
    - CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
    - CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789467564 advisory.

  - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation     inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget     and result in a denial of service. (CVE-2026-86420)

  - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL     image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and     cause a denial of service. (CVE-2026-86421)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21911-1 advisory.

    - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696).
    - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711).
    - CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
    - CVE-2026-86425: Denial of Service due to heap-use-after-free vulnerability (bsc#1279797).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1789467169 advisory.

  - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation     inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget     and result in a denial of service. (CVE-2026-86420)

  - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL     image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and     cause a denial of service. (CVE-2026-86421)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ImageMagick package has been released.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791541499 advisory.

  - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation     inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget     and result in a denial of service. (CVE-2026-86420)

  - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL     image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and     cause a denial of service. (CVE-2026-86421)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4858 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4858-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     October 26, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : imagemagick     Version        : 8:6.9.11.60+dfsg-1.6+deb12u14     CVE ID         : CVE-2026-25971 CVE-2026-62343 CVE-2026-62946 CVE-2026-64685                      CVE-2026-86420 CVE-2026-86421 CVE-2026-86423 CVE-2026-86424                      CVE-2026-86425 CVE-2026-93586 CVE-2026-93587 CVE-2026-93588                      CVE-2026-93589 CVE-2026-102635 CVE-2026-106565 CVE-2026-106566                      CVE-2026-106567 CVE-2026-106568 CVE-2026-106570 CVE-2026-106571                      CVE-2026-106572 CVE-2026-106573 CVE-2026-106577 CVE-2026-106578                      CVE-2026-106579 CVE-2026-106580 CVE-2026-107208 CVE-2026-107209                      CVE-2026-107210 CVE-2026-109261     Debian Bug     : 1147176 1149974 1150224 1150337

    Multiple security vulnerabilities were discovered in imagemagick, a     software suite used for editing and manipulating digital images, which     could lead to denial of service, information disclosure or potentially     arbitrary code execution if malformed images are processed.

    Also note that this release fixes a regression where converting an SVG     with an embedded PNG data URI to PNG fails.

    For Debian 12 bookworm, these problems have been fixed in version     8:6.9.11.60+dfsg-1.6+deb12u14.

    We recommend that you upgrade your imagemagick packages.

    For the detailed security status of imagemagick please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/imagemagick

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d0a5b-d0c6-11f1-bae2-3497f65b111b advisory.

    The ImageMagick project published security advisories for               issues fixed in releases 7.1.2-26 through 7.1.2-34.  They include               heap buffer overflows, use-after-free, out-of-bounds reads,               integer overflows, division by zero, memory leaks and security               policy bypasses in various coders and in the command-line               interface.  A crafted image file can crash the process, disclose               memory contents or circumvent the configured security policy.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
350133	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:4334-1)	Nessus	SuSE Local Security Checks	2026/9/25	2026/9/25	medium
362257	CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1789467564)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
350146	openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21911-1)	Nessus	SuSE Local Security Checks	2026/9/25	2026/9/25	medium
361396	CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1789467169)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
375042	Photon OS 4.0: Imagemagick PHSA-2026-4.0-1091	Nessus	PhotonOS Local Security Checks	2026/11/2	2026/11/2	medium
364433	AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791541499)	Nessus	Alma Linux Local Security Checks	2026/10/9	2026/10/9	medium
371989	Debian dla-4858 : imagemagick - security update	Nessus	Debian Local Security Checks	2026/10/26	2026/10/26	medium
372203	FreeBSD : ImageMagick7 -- multiple vulnerabilities (fc4d0a5b-d0c6-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	2026/10/26	2026/11/6	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

high