CVE-2016-3718

Published: May 5, 2016Modified: Apr 22, 2026CISA KEV

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

Affected (84)

Products: Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server From Rhui, Enterprise Linux Server Supplementary Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Imagemagick: Imagemagick · Canonical: Ubuntu Linux · +3 more

Show all products

Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server From Rhui, Enterprise Linux Server Supplementary Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Imagemagick: Imagemagick · Canonical: Ubuntu Linux · Oracle: Linux, Solaris · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension, Manager, Manager Proxy, Openstack Cloud

Redhat

16 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux Hpc Node

Enterprise Linux Hpc Node Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server From Rhui

Enterprise Linux Server Supplementary Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

1 product

2 products

2 products

8 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Manager

Manager Proxy

Openstack Cloud

Configuration A

53 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 6.7
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux For Ibm Z Systems	Version 6.0_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.0_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 6.7_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.2_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.3_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.4_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.5_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.6_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.7_s390x
Redhat Enterprise Linux For Power Big Endian	Version 6.0_ppc64
Redhat Enterprise Linux For Power Big Endian	Version 7.0_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 6.7_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.2_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.3_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.4_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.5_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.6_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.7_ppc64
Redhat Enterprise Linux For Power Little Endian	Version 7.0_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.2_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.3_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.4_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.5_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.6_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.7_ppc64le
Redhat Enterprise Linux Hpc Node	Version 6.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.2
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server From Rhui	Version 6.0
Redhat Enterprise Linux Server From Rhui	Version 7.0
Redhat Enterprise Linux Server Supplementary Eus	Version 6.7z
Redhat Enterprise Linux Server Tus	Version 7.2
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Before 6.9.3-10
Imagemagick Imagemagick	Version 7.0.0-0
Imagemagick Imagemagick	Version 7.0.1-0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6
Oracle Linux	Version 7
Oracle Solaris	Version 10
Oracle Solaris	Version 11.3

Configuration E

20 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Debuginfo	Version 11 sp2
Suse Linux Enterprise Debuginfo	Version 11 sp3
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Desktop	Version 12 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Software Development Kit	Version 12 sp1
Suse Linux Enterprise Workstation Extension	Version 12
Suse Linux Enterprise Workstation Extension	Version 12 sp1
Suse Manager	Version 2.1
Suse Manager Proxy	Version 2.1
Suse Openstack Cloud	Version 5

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (39)

http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0726.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3580

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/03/18

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/538378/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2990-1

Source: secalert@redhat.com

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201611-21

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/39767/

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588

Source: secalert@redhat.com

Vendor Advisory

https://www.imagemagick.org/script/changelog.php

Source: secalert@redhat.com

Release Notes

http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog