Vulnerabilities > CVE-2019-11037 - Out-of-bounds Write vulnerability in PHP Imagick

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Gentoo Linux Security Advisory GLSA 202003-38.
#
# The advisory text is Copyright (C) 2001-2020 Gentoo Foundation, Inc.
# and licensed under the Creative Commons - Attribution / Share Alike 
# license. See http://creativecommons.org/licenses/by-sa/3.0/
#

include("compat.inc");

if (description)
{
  script_id(134724);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/24");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"GLSA", value:"202003-38");

  script_name(english:"GLSA-202003-38 : PECL Imagick: Arbitrary code execution");
  script_summary(english:"Checks for updated package(s) in /var/db/pkg");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Gentoo host is missing one or more security-related
patches."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"The remote host is affected by the vulnerability described in GLSA-202003-38
(PECL Imagick: Arbitrary code execution)

    An out-of-bounds write vulnerability was discovered in the Imagick PHP
      extension.
  
Impact :

    A remote attacker, able to upload specially crafted images which will
      get processed by Imagick, could possibly execute arbitrary code with the
      privileges of the process or cause a Denial of Service condition.
  
Workaround :

    There is no known workaround at this time."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://security.gentoo.org/glsa/202003-38"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"All Imagick PHP extension users should upgrade to the latest version:
      # emerge --sync
      # emerge --ask --oneshot --verbose '>=dev-php/pecl-imagick-3.4.4'"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:gentoo:linux");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/03/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/20");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Gentoo Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("qpkg.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Gentoo/release")) audit(AUDIT_OS_NOT, "Gentoo");
if (!get_kb_item("Host/Gentoo/qpkg-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;

if (qpkg_check(package:"dev-php/pecl-imagick", unaffected:make_list("ge 3.4.4"), vulnerable:make_list("lt 3.4.4"))) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = qpkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "PECL Imagick");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Debian Security Advisory DSA-4576. The text 
# itself is copyright (C) Software in the Public Interest, Inc.
#

include("compat.inc");

if (description)
{
  script_id(131294);
  script_version("1.2");
  script_cvs_date("Date: 2019/12/09");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"DSA", value:"4576");

  script_name(english:"Debian DSA-4576-1 : php-imagick - security update");
  script_summary(english:"Checks dpkg output for the updated package");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Debian host is missing a security-related update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"An out-of-bounds write vulnerability was discovered in php-imagick, a
PHP extension to create and modify images using the ImageMagick API,
which could result in denial of service, or potentially the execution
of arbitrary code."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928420"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://security-tracker.debian.org/tracker/source-package/php-imagick"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://packages.debian.org/source/stretch/php-imagick"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.debian.org/security/2019/dsa-4576"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Upgrade the php-imagick packages.

For the oldstable distribution (stretch), this problem has been fixed
in version 3.4.3~rc2-2+deb9u1."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:php-imagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/11/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/11/26");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Debian Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("debian_package.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (deb_check(release:"9.0", prefix:"php-imagick", reference:"3.4.3~rc2-2+deb9u1")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
  else security_hole(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux AMI Security Advisory ALAS-2019-1237.
#

include("compat.inc");

if (description)
{
  script_id(127065);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/06");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"ALAS", value:"2019-1237");

  script_name(english:"Amazon Linux AMI : php54-pecl-imagick / php55-pecl-imagick,php56-pecl-imagick,php70-pecl-imagick,php71-pecl-imagick,php72-pecl-imagick (ALAS-2019-1237)");
  script_summary(english:"Checks rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Amazon Linux AMI host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"In PHP imagick extension, writing to an array of values in
ImagickKernel::fromMatrix() function did not check that the address
will be within the allocated array. This could lead to out of bounds
write to memory if the function is called with the data controlled by
untrusted party. (CVE-2019-11037)"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://alas.aws.amazon.com/ALAS-2019-1237.html"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Run 'yum update php54-pecl-imagick' to update your system.

Run 'yum update php55-pecl-imagick' to update your system.

Run 'yum update php56-pecl-imagick' to update your system.

Run 'yum update php70-pecl-imagick' to update your system.

Run 'yum update php71-pecl-imagick' to update your system.

Run 'yum update php72-pecl-imagick' to update your system."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php54-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php54-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php55-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php55-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php56-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php56-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php70-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php70-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php70-pecl-imagick-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php71-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php71-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php71-pecl-imagick-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php72-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php72-pecl-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:php72-pecl-imagick-devel");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/07/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/07/26");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Amazon Linux Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

release = get_kb_item("Host/AmazonLinux/release");
if (isnull(release) || !strlen(release)) audit(AUDIT_OS_NOT, "Amazon Linux");
os_ver = pregmatch(pattern: "^AL(A|\d)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "A")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux AMI", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (rpm_check(release:"ALA", reference:"php54-pecl-imagick-3.4.4-1.10.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php54-pecl-imagick-debuginfo-3.4.4-1.10.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php55-pecl-imagick-3.4.4-1.14.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php55-pecl-imagick-debuginfo-3.4.4-1.14.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php56-pecl-imagick-3.4.4-1.15.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php56-pecl-imagick-debuginfo-3.4.4-1.15.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php70-pecl-imagick-3.4.4-1.6.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php70-pecl-imagick-debuginfo-3.4.4-1.6.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php70-pecl-imagick-devel-3.4.4-1.6.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php71-pecl-imagick-3.4.4-1.7.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php71-pecl-imagick-debuginfo-3.4.4-1.7.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php71-pecl-imagick-devel-3.4.4-1.7.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php72-pecl-imagick-3.4.4-1.9.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php72-pecl-imagick-debuginfo-3.4.4-1.9.amzn1")) flag++;
if (rpm_check(release:"ALA", reference:"php72-pecl-imagick-devel-3.4.4-1.9.amzn1")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php54-pecl-imagick / php54-pecl-imagick-debuginfo / etc");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-5dc1f4100e.
#

include("compat.inc");

if (description)
{
  script_id(125181);
  script_version("1.4");
  script_cvs_date("Date: 2020/01/17");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"FEDORA", value:"2019-5dc1f4100e");

  script_name(english:"Fedora 29 : php-pecl-imagick (2019-5dc1f4100e)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**Version 3.4.4**

  - The 3.4.4 release is intended to be the last release
    (other than small bug fixes) that will support either
    PHP 5.x, or ImageMagick 6.x. The next planned release
    will be PHP > 7.0 and ImageMagick > 7.0 at least, if not
    higher.

  - **Added:**

  - function Imagick::optimizeImageTransparency()

  - METRIC_STRUCTURAL_SIMILARITY_ERROR

  - METRIC_STRUCTURAL_DISSIMILARITY_ERROR

  - COMPRESSION_ZSTD - https://github.com/facebook/zstd

  - COMPRESSION_WEBP

  - CHANNEL_COMPOSITE_MASK

  - FILTER_CUBIC_SPLINE - 'Define the lobes with the -define
    filter:lobes={2,3,4} (reference
    https://imagemagick.org/discourse-server/viewtopic.php?f
    =2&t=32506).'

  - Imagick now explicitly conflicts with the Gmagick
    extension.

  - **Fixes:**

  - Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x

  - Bug 77128 - Imagick::setImageInterpolateMethod() not
    available on Windows

  - Prevent memory leak when ImagickPixel::__construct
    called after object instantiation.

  - Prevent segfault when ImagickPixel internal constructor
    not called.

  - Imagick::setResourceLimit support for values larger than
    2GB (2^31) on 32bit platforms.

  - Corrected memory overwrite in
    Imagick::colorDecisionListImage()

  - Bug 77791 - ImagickKernel::fromMatrix() out of bounds
    write.

  - **Deprecated:**

  - The following functions have been deprecated :

  - ImagickDraw, matte

  - Imagick::averageimages

  - Imagick::colorfloodfillimage

  - Imagick::filter

  - Imagick::flattenimages

  - Imagick::getimageattribute

  - Imagick::getimagechannelextrema

  - Imagick::getimageclipmask

  - Imagick::getimageextrema

  - Imagick::getimageindex

  - Imagick::getimagematte

  - Imagick::getimagemattecolor

  - Imagick::getimagesize

  - Imagick::mapimage

  - Imagick::mattefloodfillimage

  - Imagick::medianfilterimage

  - Imagick::mosaicimages

  - Imagick::orderedposterizeimage

  - Imagick::paintfloodfillimage

  - Imagick::paintopaqueimage

  - Imagick::painttransparentimage

  - Imagick::radialblurimage

  - Imagick::recolorimage

  - Imagick::reducenoiseimage

  - Imagick::roundcornersimage

  - Imagick::roundcorners

  - Imagick::setimageattribute

  - Imagick::setimagebias

  - Imagick::setimageclipmask

  - Imagick::setimageindex

  - Imagick::setimagemattecolor

  - Imagick::setimagebiasquantum

  - Imagick::setimageopacity

  - Imagick::transformimage

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-5dc1f4100e"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected php-pecl-imagick package."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:29");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^29([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 29", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC29", reference:"php-pecl-imagick-3.4.4-1.fc29")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php-pecl-imagick");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2020-14.
#
# The text description of this plugin is (C) SUSE LLC.
#

include("compat.inc");

if (description)
{
  script_id(132905);
  script_version("1.2");
  script_cvs_date("Date: 2020/01/17");

  script_cve_id("CVE-2019-11037");

  script_name(english:"openSUSE Security Update : php7-imagick (openSUSE-2020-14)");
  script_summary(english:"Check for the openSUSE-2020-14 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for php7-imagick fixes the following issues :

Upgrade to version 3.4.4 :

Added :

  - function Imagick::optimizeImageTransparency()

  - METRIC_STRUCTURAL_SIMILARITY_ERROR

  - METRIC_STRUCTURAL_DISSIMILARITY_ERROR

  - COMPRESSION_ZSTD - https://github.com/facebook/zstd

  - COMPRESSION_WEBP

  - CHANNEL_COMPOSITE_MASK

  - FILTER_CUBIC_SPLINE - 'Define the lobes with the -define
    filter:lobes=(2,3,4) (reference
    https://imagemagick.org/discourse-server/viewtopic.php?f
    =2&t=32506).'

  - Imagick now explicitly conflicts with the Gmagick
    extension.

Fixes :

  - Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x

  - Bug 77128 - Imagick::setImageInterpolateMethod() not
    available on Windows

  - Prevent memory leak when ImagickPixel::__construct
    called after object instantiation.

  - Prevent segfault when ImagickPixel internal constructor
    not called.

  - Imagick::setResourceLimit support for values larger than
    2GB (2^31) on 32bit platforms.

  - Corrected memory overwrite in
    Imagick::colorDecisionListImage()

  - Bug 77791 - ImagickKernel::fromMatrix() out of bounds
    write. Fixes CVE-2019-11037, boo#1135418

The following functions have been deprecated :

  - ImagickDraw, matte

  - Imagick::averageimages

  - Imagick::colorfloodfillimage

  - Imagick::filter

  - Imagick::flattenimages

  - Imagick::getimageattribute

  - Imagick::getimagechannelextrema

  - Imagick::getimageclipmask

  - Imagick::getimageextrema

  - Imagick::getimageindex

  - Imagick::getimagematte

  - Imagick::getimagemattecolor

  - Imagick::getimagesize

  - Imagick::mapimage

  - Imagick::mattefloodfillimage

  - Imagick::medianfilterimage

  - Imagick::mosaicimages

  - Imagick::orderedposterizeimage

  - Imagick::paintfloodfillimage

  - Imagick::paintopaqueimage

  - Imagick::painttransparentimage

  - Imagick::radialblurimage

  - Imagick::recolorimage

  - Imagick::reducenoiseimage

  - Imagick::roundcornersimage

  - Imagick::roundcorners

  - Imagick::setimageattribute

  - Imagick::setimagebias

  - Imagick::setimageclipmask

  - Imagick::setimageindex

  - Imagick::setimagemattecolor

  - Imagick::setimagebiasquantum

  - Imagick::setimageopacity

  - Imagick::transformimage"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1135418"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://github.com/facebook/zstd"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://imagemagick.org/discourse-server/viewtopic.php?f=2&t=32506"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected php7-imagick packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-imagick");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-imagick-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php7-imagick-debugsource");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.1");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(x86_64)$") audit(AUDIT_ARCH_NOT, "x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.1", reference:"php7-imagick-3.4.4-lp151.8.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-imagick-debuginfo-3.4.4-lp151.8.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.1", reference:"php7-imagick-debugsource-3.4.4-lp151.8.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php7-imagick / php7-imagick-debuginfo / php7-imagick-debugsource");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-488d0f9a4b.
#

include("compat.inc");

if (description)
{
  script_id(125180);
  script_version("1.4");
  script_cvs_date("Date: 2020/01/17");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"FEDORA", value:"2019-488d0f9a4b");

  script_name(english:"Fedora 30 : php-pecl-imagick (2019-488d0f9a4b)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**Version 3.4.4**

  - The 3.4.4 release is intended to be the last release
    (other than small bug fixes) that will support either
    PHP 5.x, or ImageMagick 6.x. The next planned release
    will be PHP > 7.0 and ImageMagick > 7.0 at least, if not
    higher.

  - **Added:**

  - function Imagick::optimizeImageTransparency()

  - METRIC_STRUCTURAL_SIMILARITY_ERROR

  - METRIC_STRUCTURAL_DISSIMILARITY_ERROR

  - COMPRESSION_ZSTD - https://github.com/facebook/zstd

  - COMPRESSION_WEBP

  - CHANNEL_COMPOSITE_MASK

  - FILTER_CUBIC_SPLINE - 'Define the lobes with the -define
    filter:lobes={2,3,4} (reference
    https://imagemagick.org/discourse-server/viewtopic.php?f
    =2&t=32506).'

  - Imagick now explicitly conflicts with the Gmagick
    extension.

  - **Fixes:**

  - Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x

  - Bug 77128 - Imagick::setImageInterpolateMethod() not
    available on Windows

  - Prevent memory leak when ImagickPixel::__construct
    called after object instantiation.

  - Prevent segfault when ImagickPixel internal constructor
    not called.

  - Imagick::setResourceLimit support for values larger than
    2GB (2^31) on 32bit platforms.

  - Corrected memory overwrite in
    Imagick::colorDecisionListImage()

  - Bug 77791 - ImagickKernel::fromMatrix() out of bounds
    write.

  - **Deprecated:**

  - The following functions have been deprecated :

  - ImagickDraw, matte

  - Imagick::averageimages

  - Imagick::colorfloodfillimage

  - Imagick::filter

  - Imagick::flattenimages

  - Imagick::getimageattribute

  - Imagick::getimagechannelextrema

  - Imagick::getimageclipmask

  - Imagick::getimageextrema

  - Imagick::getimageindex

  - Imagick::getimagematte

  - Imagick::getimagemattecolor

  - Imagick::getimagesize

  - Imagick::mapimage

  - Imagick::mattefloodfillimage

  - Imagick::medianfilterimage

  - Imagick::mosaicimages

  - Imagick::orderedposterizeimage

  - Imagick::paintfloodfillimage

  - Imagick::paintopaqueimage

  - Imagick::painttransparentimage

  - Imagick::radialblurimage

  - Imagick::recolorimage

  - Imagick::reducenoiseimage

  - Imagick::roundcornersimage

  - Imagick::roundcorners

  - Imagick::setimageattribute

  - Imagick::setimagebias

  - Imagick::setimageclipmask

  - Imagick::setimageindex

  - Imagick::setimagemattecolor

  - Imagick::setimagebiasquantum

  - Imagick::setimageopacity

  - Imagick::transformimage

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-488d0f9a4b"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected php-pecl-imagick package."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:30");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^30([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 30", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC30", reference:"php-pecl-imagick-3.4.4-1.fc30")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php-pecl-imagick");
}

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-9448fa46f3.
#

include("compat.inc");

if (description)
{
  script_id(125183);
  script_version("1.4");
  script_cvs_date("Date: 2020/01/17");

  script_cve_id("CVE-2019-11037");
  script_xref(name:"FEDORA", value:"2019-9448fa46f3");

  script_name(english:"Fedora 28 : php-pecl-imagick (2019-9448fa46f3)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**Version 3.4.4**

  - The 3.4.4 release is intended to be the last release
    (other than small bug fixes) that will support either
    PHP 5.x, or ImageMagick 6.x. The next planned release
    will be PHP > 7.0 and ImageMagick > 7.0 at least, if not
    higher.

  - **Added:**

  - function Imagick::optimizeImageTransparency()

  - METRIC_STRUCTURAL_SIMILARITY_ERROR

  - METRIC_STRUCTURAL_DISSIMILARITY_ERROR

  - COMPRESSION_ZSTD - https://github.com/facebook/zstd

  - COMPRESSION_WEBP

  - CHANNEL_COMPOSITE_MASK

  - FILTER_CUBIC_SPLINE - 'Define the lobes with the -define
    filter:lobes={2,3,4} (reference
    https://imagemagick.org/discourse-server/viewtopic.php?f
    =2&t=32506).'

  - Imagick now explicitly conflicts with the Gmagick
    extension.

  - **Fixes:**

  - Correct version check to make RemoveAlphaChannel and
    FlattenAlphaChannel be available when using Imagick with
    ImageMagick version 6.7.8-x

  - Bug 77128 - Imagick::setImageInterpolateMethod() not
    available on Windows

  - Prevent memory leak when ImagickPixel::__construct
    called after object instantiation.

  - Prevent segfault when ImagickPixel internal constructor
    not called.

  - Imagick::setResourceLimit support for values larger than
    2GB (2^31) on 32bit platforms.

  - Corrected memory overwrite in
    Imagick::colorDecisionListImage()

  - Bug 77791 - ImagickKernel::fromMatrix() out of bounds
    write.

  - **Deprecated:**

  - The following functions have been deprecated :

  - ImagickDraw, matte

  - Imagick::averageimages

  - Imagick::colorfloodfillimage

  - Imagick::filter

  - Imagick::flattenimages

  - Imagick::getimageattribute

  - Imagick::getimagechannelextrema

  - Imagick::getimageclipmask

  - Imagick::getimageextrema

  - Imagick::getimageindex

  - Imagick::getimagematte

  - Imagick::getimagemattecolor

  - Imagick::getimagesize

  - Imagick::mapimage

  - Imagick::mattefloodfillimage

  - Imagick::medianfilterimage

  - Imagick::mosaicimages

  - Imagick::orderedposterizeimage

  - Imagick::paintfloodfillimage

  - Imagick::paintopaqueimage

  - Imagick::painttransparentimage

  - Imagick::radialblurimage

  - Imagick::recolorimage

  - Imagick::reducenoiseimage

  - Imagick::roundcornersimage

  - Imagick::roundcorners

  - Imagick::setimageattribute

  - Imagick::setimagebias

  - Imagick::setimageclipmask

  - Imagick::setimageindex

  - Imagick::setimagemattecolor

  - Imagick::setimagebiasquantum

  - Imagick::setimageopacity

  - Imagick::transformimage

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-9448fa46f3"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected php-pecl-imagick package."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-pecl-imagick");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:28");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/16");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^28([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 28", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC28", reference:"php-pecl-imagick-3.4.4-1.fc28")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php-pecl-imagick");
}