The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 6, 2018 |
| Debian | — | Upgrade imagemagick | Feb 19, 2019 | Sep 6, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 6, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 6, 2018 |
| Suse | — | Upgrade GraphicsMagickUpgrade libMagickWand1Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagick++-develUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore1Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagick++-6_Q16-3Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-develUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade libMagick++1Upgrade ImageMagick-extraUpgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bitUpgrade libMagickWand1-32bitUpgrade libMagick++-7_Q16HDRI4 | Oct 6, 2018 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2 | Oct 17, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub