Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ImageMagick の coders/psd.c により、リモートの攻撃者が細工された PSD ファイルを介して領域外書き込みを発生させることで、詳細不明な影響を与える可能性があります。 （CVE-2017-5509）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ImageMagick 中的 coders/psd.c 允許遠端攻擊者透過特製的 PSD 檔案觸發超出邊界寫入，進而造成不明影響。 (CVE-2017-5509)

請注意，Nessus 依賴供應商報告的套件存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file,     which triggers an out-of-bounds write. (CVE-2017-5509)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ImageMagick 中的 coders/psd.c 允许远程攻击者通过构建的 PSD 文件产生不明影响，该文件会触发越界写入。 (CVE-2017-5509)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

詳細については、CVE/URLリストを参照してください。

遠端主機受到 GLSA-201702-09 中所述的弱點影響 (ImageMagick：多個弱點) 在 ImageMagick 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：遠端攻擊者可引誘使用者處理特製的影像檔案，並可能以處理程序的權限執行任意程式碼，或造成拒絕服務情形。因應措施：目前尚無已知的因應措施。

Please reference CVE/URL list for details

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ImageMagick is an image display and manipulation tool     for the X Window System. ImageMagick can read and write     JPEG, TIFF, PNM, GIF,and Photo CD image formats. It can     resize, rotate, sharpen, color reduce, or add special     effects to an image, and when finished you can either     save the completed work in the original format or a     different one. ImageMagick also includes command line     programs for creating animated or transparent .gifs,     creating composite images, creating thumbnail images,     and more.ImageMagick is one of your choices if you need     a program to manipulate and display images. If you want     to develop your own applications which use ImageMagick     code or APIs, you need to install ImageMagick-devel as     well.Security Fix(es):In ImageMagick before 7.0.8-8, a     NULL pointer dereference exists in the     GetMagickProperty function in     MagickCore/property.c.(CVE-2018-16329)ImageMagick     before 6.9.9-24 and 7.x before 7.0.7-12 has a     use-after-free in Magick::Image::read in     Magick++/lib/Image.cpp.(CVE-2017-17499)In ImageMagick     before 6.9.8-5 and 7.x before 7.0.5-6, there is a     memory leak in the ReadMATImage function in     coders/mat.c.(CVE-2017-13146)In ImageMagick before     6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage     function in coders/mat.c uses uninitialized data, which     might allow remote attackers to obtain sensitive     information from process memory.(CVE-2017-13143)In     ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the     ReadOneMNGImage function in coders/png.c has an     out-of-bounds read with the MNG CLIP     chunk.(CVE-2017-13139)coders/psd.c in ImageMagick     allows remote attackers to have unspecified impact via     a crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5510)coders/psd.c in ImageMagick allows     remote attackers to have unspecified impact via a     crafted PSD file, which triggers an out-of-bounds     write.(CVE-2017-5509)Memory leak in coders/mpc.c in     ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4     allows remote attackers to cause a denial of service     (memory consumption) via vectors involving a pixel     cache.(CVE-2017-5507)Memory leak in the IsOptionMember     function in MagickCore/option.c in ImageMagick before     6.9.2-2, as used in ODR-PadEnc and other products,     allows attackers to trigger memory     consumption.(CVE-2016-10252)Off-by-one error in     coders/wpg.c in ImageMagick allows remote attackers to     have unspecified impact via vectors related to a string     copy.(CVE-2016-10145)Memory leak in     AcquireVirtualMemory in ImageMagick before 7 allows     remote attackers to cause a denial of service (memory     consumption) via unspecified vectors.(CVE-2016-7539)In     coders/bmp.c in ImageMagick before 7.0.8-16, an input     file can result in an infinite loop and hang, with high     CPU and memory consumption. Remote attackers could     leverage this vulnerability to cause a denial of     service via a crafted file.(CVE-2018-20467)In     ImageMagick before 7.0.8-8, a NULL pointer dereference     exists in the CheckEventLogging function in     MagickCore/log.c.(CVE-2018-16328)ReadXBMImage in     coders/xbm.c in ImageMagick before 7.0.8-9 leaves data     uninitialized when processing an XBM file that has a     negative pixel value. If the affected code is used as a     library loaded into a process that includes sensitive     information, that information sometimes can be leaked     via the image data.(CVE-2018-16323)WriteEPTImage in     coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote     attackers to cause a denial of service     (MagickCore/memory.c double free and application crash)     or possibly have unspecified other impact via a crafted     file.(CVE-2018-8804)In ImageMagick 7.0.8-3 Q16,     ReadDIBImage and WriteDIBImage in coders/dib.c allow     attackers to cause an out of bounds write via a crafted     file.(CVE-2018-12600)ImageMagick version 7.0.7-2     contains a memory leak in ReadYUVImage in     coders/yuv.c.(CVE-2017-15033)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートホストは、GLSA-201702-09（ImageMagick：複数の脆弱性）に記載されている脆弱性に影響されています。複数の脆弱性がImageMagickで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、ユーザーを誘導して特別に細工された画像ファイルを処理させることで、プロセスの権限で任意のコードが実行されたり、サービス拒否状態が引き起こされたりする可能性があります。回避策：現時点では、既知の回避策はありません。

The remote host is affected by the vulnerability described in GLSA-201702-09 (ImageMagick: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ImageMagick. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted       image file, could execute arbitrary code with the privileges of the       process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

远程主机受到 GLSA-201702-09 中所述漏洞的影响（ImageMagick：多个漏洞）在 ImageMagick 中发现多个漏洞。请检查下面引用的 CVE 标识符以了解详细信息。影响：远程攻击者可诱骗用户处理特别构建的图像文件，从而导致以进程权限执行任意代码或造成拒绝服务的情况。解决方法：目前无任何已知的解决方法。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
220997	Linux Distros のパッチ未適用の脆弱性: CVE-2017-5509	Nessus	Misc.	2025/3/4	2025/3/4	high
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	2020/4/15	2021/2/9	critical
220997	Linux Distros 未修補弱點：CVE-2017-5509	Nessus	Misc.	2025/3/4	2025/3/4	high
220997	Linux Distros Unpatched Vulnerability : CVE-2017-5509	Nessus	Misc.	2025/3/4	2025/3/4	high
220997	Linux Distros 未修补的漏洞: CVE-2017-5509	Nessus	Misc.	2025/3/4	2025/3/4	high
100441	FreeBSD：ImageMagick -- 複数の脆弱性（50776801-4183-11e7-b291-b499baebfeaf）	Nessus	FreeBSD Local Security Checks	2017/5/26	2021/1/4	critical
97252	GLSA-201702-09：ImageMagick：多個弱點	Nessus	Gentoo Local Security Checks	2017/2/21	2021/1/11	critical
100441	FreeBSD : ImageMagick -- multiple vulnerabilities (50776801-4183-11e7-b291-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	2017/5/26	2021/1/4	critical
130869	EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-2160)	Nessus	Huawei Local Security Checks	2019/11/12	2021/2/9	critical
97252	GLSA-201702-09：ImageMagick：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/2/21	2021/1/11	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	2019/12/10	2021/2/9	critical
97252	GLSA-201702-09 : ImageMagick: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/2/21	2021/1/11	critical
97252	GLSA-201702-09：ImageMagick：多个漏洞	Nessus	Gentoo Local Security Checks	2017/2/21	2021/1/11	critical

检测

插件搜索

high

critical

high

high

high

critical

critical

critical

critical

critical

critical

critical

critical