In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Apr 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perl | Oct 28, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Apr 29, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotrace-develUpgrade autotraceUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagickUpgrade inkscape-docsUpgrade autotrace-debuginfo | Apr 1, 2020 | Apr 29, 2019 |
| Debian | — | Upgrade imagemagick | May 15, 2019 | Apr 29, 2019 |
| Freebsd | — | Upgrade ImageMagick6-nox11Upgrade ImageMagick7Upgrade ImageMagick7-nox11Upgrade ImageMagick6 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | May 30, 2019 | Apr 29, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade autotraceUpgrade emacsUpgrade inkscapeUpgrade ImageMagick-c++Upgrade emacs-elUpgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade ImageMagickUpgrade autotrace-develUpgrade emacs-common | Oct 5, 2022 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade autotrace-debuginfoNo solution existsUpgrade autotraceUpgrade ImageMagick | Apr 1, 2020 | Apr 29, 2019 |
| Suse | — | Upgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1 | Jun 25, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro) | Jun 25, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub