ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perl | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade inkscapeUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade emacsUpgrade emacs-filesystemUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade emacs-noxUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade emacs-elUpgrade inkscapeUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade autotrace | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoNo solution existsUpgrade inkscapeUpgrade autotrace | Apr 1, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-docUpgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-extraUpgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1 | Aug 9, 2024 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub