debian/php-horde-image vulnerabilities

Latest debian/php-horde-image CVEs

Newest publication first

1. DSA-4276-1 php-horde-image - security update

   Published 2018-08-17

   Unknown

2. DLA-1395-1 php-horde-image - security update

   Published 2018-06-22

   Unknown

3. CVE-2017-14650 A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde applic...

   Published 2017-09-21

   High·CVSS 8.1 EPSS 4.0%

   A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code....

4. CVE-2017-9774 Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.

   Published 2017-06-21

   High·CVSS 8.8 EPSS 2.4%

   Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.

5. CVE-2017-9773 Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.

   Published 2017-06-21

   Medium·CVSS 5.7 EPSS 0.85%

   Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.