WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perl | Oct 28, 2020 | Mar 20, 2018 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Mar 20, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp1 | — | — | May 29, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade ImageMagickUpgrade autotraceUpgrade emacs-commonUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade emacsUpgrade autotrace-develUpgrade inkscapeUpgrade emacs-elUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade emacs-nox | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-c++No solution existsUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | Mar 20, 2018 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade libMagick++1Upgrade libMagick++-develUpgrade libMagickCore1Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1-32bitUpgrade libMagickWand1-32bitUpgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade perl-PerlMagickUpgrade ImageMagick-config-6-upstream | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore5-extraUpgrade imagemagick-6.q16 | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub