In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-devel | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade inkscapeUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade autotrace-devel | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Feb 19, 2019 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade emacs-terminalUpgrade ImageMagick-c++Upgrade emacs-elUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade autotrace-develUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade emacsUpgrade autotraceUpgrade emacs-nox | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscape-debuginfoNo solution existsUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-doc | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade perl-GraphicsMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1Upgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libGraphicsMagick2Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagick++1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1 | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7 | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub