ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade emacs-commonUpgrade emacs-noxUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacsUpgrade ImageMagick-docUpgrade autotraceUpgrade inkscape-docsUpgrade emacs-el | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceNo solution existsUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-docUpgrade inkscape-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade ImageMagick-extraUpgrade libMagick++-develUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSE | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extra | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub