github.com
https://github.com/ImageMagick/ImageMagick GHSA-QV2Q-C278-PCH5
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
Description
The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/
Description source: GitHub Advisory
Affected products and versions
Showing 12 of 17| Product | Source | Version range | Status |
|---|---|---|---|
Magick.NET-Q16-AnyCPUBrowse NuGet / Magick.NET-Q16-AnyCPU | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-HDRI-AnyCPUBrowse NuGet / Magick.NET-Q16-HDRI-AnyCPU | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-HDRI-OpenMP-arm64Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-HDRI-arm64Browse NuGet / Magick.NET-Q16-HDRI-arm64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-HDRI-x64Browse NuGet / Magick.NET-Q16-HDRI-x64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-HDRI-x86Browse NuGet / Magick.NET-Q16-HDRI-x86 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-OpenMP-arm64Browse NuGet / Magick.NET-Q16-OpenMP-arm64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-OpenMP-x64Browse NuGet / Magick.NET-Q16-OpenMP-x64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-arm64Browse NuGet / Magick.NET-Q16-arm64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-x64Browse NuGet / Magick.NET-Q16-x64 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q16-x86Browse NuGet / Magick.NET-Q16-x86 | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
Magick.NET-Q8-AnyCPUBrowse NuGet / Magick.NET-Q8-AnyCPU | GitHub Advisory | Before 14.12.0 · Fixed in 14.12.0 | affected |
References
3github.com
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5 imagemagick.org
https://imagemagick.org/cipher