Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

ImageMagick on Debian can allow code execution

CVE-2023-34152 · published 1 day ago
Summary

The ImageMagick program in Debian releases can be tricked into running unwanted code, which could let an attacker take control of the system. This risk has been fixed in recent updates for the affected Debian packages. Apply the latest package updates as soon as possible to protect your servers.

What to do
  • Update debian rootio-imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u8.root.io.32.
  • Update debian rootio-imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u8.root.io.33.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u7.root.io.13.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.20.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.27.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.28.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u13.root.io.29.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u4.root.io.30.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u15.root.io.32.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.33.
  • Update debian imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.33.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u10.root.io.48.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u4.root.io.17.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u7.root.io.41.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.43.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.44.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.45.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.46.
  • Update debian rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u9.root.io.49.
  • Update debian rootio-imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u11.root.io.34.
  • Update debian imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u11.root.io.34.
  • Update imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35.
  • Update rootio-imagemagick to version 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35.
  • Update imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39.
  • Update rootio-imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39.
  • Update imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56.
  • Update rootio-imagemagick to version 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56.
  • Update imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u12.aikido.40.
  • Update rootio-imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u12.aikido.40.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian imagemagick All versions
Debian:13 debian imagemagick All versions
Ubuntu:Pro:18.04:LTS canonical imagemagick All versions
Ubuntu:Pro:20.04:LTS canonical imagemagick All versions
Ubuntu:22.04:LTS canonical imagemagick All versions
Debian:14 debian imagemagick All versions
Root:Debian:13 debian rootio-imagemagick < 8:7.1.1.43+dfsg1-1+deb13u8.root.io.32
< 8:7.1.1.43+dfsg1-1+deb13u8.root.io.33
< 8:7.1.1.43+dfsg1-1+deb13u11.root.io.34
Fix: upgrade to 8:7.1.1.43+dfsg1-1+deb13u8.root.io.32
Root:Debian:11 debian rootio-imagemagick < 8:6.9.11.60+dfsg-1.3+deb11u7.root.io.13
< 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.20
< 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.27
< 8:6.9.11.60+dfsg-1.3+deb11u10.root.io.28
< 8:6.9.11.60+dfsg-1.3+deb11u13.root.io.29
< 8:6.9.11.60+dfsg-1.3+deb11u4.root.io.30
< 8:6.9.11.60+dfsg-1.3+deb11u15.root.io.32
< 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.33
Fix: upgrade to 8:6.9.11.60+dfsg-1.3+deb11u7.root.io.13
Root:Debian:11 debian imagemagick < 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.33
Fix: upgrade to 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.33
Root:Debian:12 debian rootio-imagemagick < 8:6.9.11.60+dfsg-1.6+deb12u10.root.io.48
< 8:6.9.11.60+dfsg-1.6+deb12u4.root.io.17
< 8:6.9.11.60+dfsg-1.6+deb12u7.root.io.41
< 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.43
< 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.44
< 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.45
< 8:6.9.11.60+dfsg-1.6+deb12u8.root.io.46
< 8:6.9.11.60+dfsg-1.6+deb12u9.root.io.49
Fix: upgrade to 8:6.9.11.60+dfsg-1.6+deb12u10.root.io.48
Root:Debian:13 debian imagemagick < 8:7.1.1.43+dfsg1-1+deb13u11.root.io.34
Fix: upgrade to 8:7.1.1.43+dfsg1-1+deb13u11.root.io.34
Root:Debian:11 – imagemagick < 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35
Fix: upgrade to 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35
Root:Debian:11 – rootio-imagemagick < 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35
Fix: upgrade to 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.35
Root:Debian:13 – imagemagick < 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39
< 8:7.1.1.43+dfsg1-1+deb13u12.aikido.40
Fix: upgrade to 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39
Root:Debian:13 – rootio-imagemagick < 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39
< 8:7.1.1.43+dfsg1-1+deb13u12.aikido.40
Fix: upgrade to 8:7.1.1.43+dfsg1-1+deb13u11.aikido.39
Root:Debian:12 – imagemagick < 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56
Fix: upgrade to 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56
Root:Debian:12 – rootio-imagemagick < 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56
Fix: upgrade to 8:6.9.11.60+dfsg-1.6+deb12u13.aikido.56
Original advisory text
CVE-2023-34152 in imagemagick - Patched by Root
Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:13. Multiple fixed versions available.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (OSV)
Exploitation
EPSS 8%
Timeline
Published24 Sep 2026
Updated24 Sep 2026
First seen16 Mar 2026
Sources
ROOT-OS-DEBIAN-11-CVE-2023-34152 · OSV
ROOT-OS-DEBIAN-12-CVE-2023-34152 · OSV
DEBIAN-CVE-2023-34152 · OSV
CVE-2023-34152 · NVD
UBUNTU-CVE-2023-34152 · OSV
ROOT-OS-DEBIAN-13-CVE-2023-34152 · OSV
Track software like this
Free during beta