CVE-2016-3718
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 3 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 75.65% probability · 100th percentile
- Public exploits
- 1 in Exploit-DB · first 4 May 2016
- CISA KEV
- Listed 3 November 2021 · due 3 May 2022
- Weakness
- CWE-918
- Affected
- redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux for ibm z systems · redhat/enterprise linux for ibm z systems eus · redhat/enterprise linux for power big endian · redhat/enterprise linux for power big endian eus · redhat/enterprise linux for power little endian · redhat/enterprise linux for power little endian eus · redhat/enterprise linux hpc node · redhat/enterprise linux hpc node eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server from rhui · redhat/enterprise linux server supplementary eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · imagemagick/imagemagick · canonical/ubuntu linux · oracle/linux · oracle/solaris · +10 more
- Source
- secalert@redhat.com
EPSS moved from 75.6% on 12 October 2026 to 75.6% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
CISA notes
Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-3718
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLogPatch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0726.htmlThird Party Advisory
- http://www.debian.org/security/2016/dsa-3580Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/05/03/18Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/538378/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568Third Party Advisory
- http://www.ubuntu.com/usn/USN-2990-1Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/06/msg00009.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201611-21Third Party Advisory
- https://www.exploit-db.com/exploits/39767/Third Party Advisory, VDB Entry
- https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588Vendor Advisory
- https://www.imagemagick.org/script/changelog.phpRelease Notes
- http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLogPatch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-0726.htmlThird Party Advisory
- http://www.debian.org/security/2016/dsa-3580Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/05/03/18Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.