In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade autotrace-devel | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade emacs-commonUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade autotrace-develUpgrade emacs-elUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade emacsUpgrade inkscapeUpgrade emacs-nox | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade ImageMagick-docNo solution existsUpgrade inkscape-viewUpgrade inkscape-debuginfo | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libMagick++-6_Q16-3Upgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-docUpgrade libMagickCore-6_Q16-1Upgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-extraUpgrade perl-PerlMagickUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bit | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagickwand-6.q16-3Upgrade libmagick++-6.q16hdri-7Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-6.q16hdriUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickwand-6.q16-2Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagickwand-6.q16hdri-6Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16-8 | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub