CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2014-9846

CVSS 9.8v3.0pub. 2017-03-20upd. 2026-05-13

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Canonical Ubuntu

    OS
    Canonical
    12.0414.0416.0416.10

  • Imagemagick

    APP
    Imagemagick
    6.8.8-9

  • Opensuse Leap

    OS
    Opensuse
    42.2

  • Opensuse

    OS
    Opensuse
    13.2

  • Opensuse Project Leap

    OS
    Opensuse Project
    42.1

  • Opensuse Project SUSE Linux Enterprise Debuginfo

    OS
    Opensuse Project
    11.0

  • Opensuse Project SUSE Linux Enterprise Desktop

    OS
    Opensuse Project
    12.0

  • Opensuse Project SUSE Linux Enterprise Server

    OS
    Opensuse Project
    11.012.0

  • Opensuse Project SUSE Linux Enterprise Software Development Kit

    OS
    Opensuse Project
    11.012.0

  • Opensuse Project SUSE Linux Enterprise Workstation Extension

    OS
    Opensuse Project
    12.0

  • SUSE Studio Onsite

    APP
    Suse
    1.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2022-0543CRITICAL10.0⚠ KEVPL ✓same product

Redis – ucieczka z Lua sandbox umożliwiająca zdalne wykonanie kodu (RCE)

CVE-2020-16846CRITICAL9.8⚠ KEVPL ✓same product

SaltStack Salt API — shell injection przez klienta SSH (RCE)

CVE-2020-12641CRITICAL9.8⚠ KEVPL ✓same product

Command injection w Roundcube Webmail — RCE przez konfigurację ImageMagick

CVE-2020-11651CRITICAL9.8⚠ KEVPL ✓same product

SaltStack Salt: nieautoryzowany dostęp do metod salt-master umożliwiający RCE