There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagickUpgrade imagemagick6 | Aug 22, 2024 | Oct 21, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | Oct 21, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Oct 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade autotrace-develUpgrade inkscape-debuginfoUpgrade autotraceUpgrade autotrace-debuginfo | Apr 1, 2020 | Oct 21, 2018 |
| Debian | — | Upgrade graphicsmagickUpgrade imagemagick | Jul 30, 2024 | Oct 21, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Oct 21, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Oct 20, 2018 |
| Oracle_linux | — | Upgrade autotraceUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade ImageMagick-c++-develUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-filesystemUpgrade ImageMagick-develUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade emacs-el | Oct 5, 2022 | Oct 19, 2018 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagickNo solution existsUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscapeUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | Oct 21, 2018 |
| Suse | — | Upgrade GraphicsMagickUpgrade libgraphicsmagick-develUpgrade ImageMagick-extraUpgrade libmagick-devel-32bitUpgrade ImageMagick-develUpgrade imagemagick-devel-32bitUpgrade graphicsmagick-develUpgrade ImageMagick-docUpgrade libgraphicsmagick3-configUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade libMagickWand-6_Q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagick++-develUpgrade libgraphicsmagickwand-q16-2Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore1Upgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade libgraphicsmagick-q16-3Upgrade libGraphicsMagick2Upgrade perl-PerlMagickUpgrade perl-GraphicsMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickWand1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libgraphicsmagick-q16-12 | Nov 21, 2018 | Oct 20, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-7 | Jun 25, 2019 | Oct 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub