Comment on Remote Code Execution in ImageMagick (CVE-2016–3714)Comments−asteadman10yI assume Lambda is affected? According to http://docs.aws.amazon.com/lambda/latest/dg/current-supporte..., Lambda functions have access to ImageMagick-6.7.8.9. I'm not sure how you can specify a policy file in such an environment.−barnybug10yYes, confirmed ImageMagick on Lambda is vulnerable.
Comments
I assume Lambda is affected? According to http://docs.aws.amazon.com/lambda/latest/dg/current-supporte..., Lambda functions have access to ImageMagick-6.7.8.9. I'm not sure how you can specify a policy file in such an environment.
Yes, confirmed ImageMagick on Lambda is vulnerable.