A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-devel | Mar 7, 2023 | Aug 26, 2022 |
| Amazon_linux | — | Upgrade ImageMagick | Mar 7, 2023 | Aug 26, 2022 |
| Debian | — | Upgrade imagemagick | Mar 13, 2023 | Aug 26, 2022 |
| Suse | — | Upgrade perl-PerlMagickUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-docUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagickUpgrade ImageMagick-extraUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-devel | Oct 26, 2022 | Aug 26, 2022 |
| Ubuntu | — | Upgrade perlmagickUpgrade libmagickcore-6-arch-configUpgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16-devUpgrade libmagickcore-devUpgrade libmagick++-devUpgrade libmagickcore-6-headersUpgrade libmagickwand-devUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-devUpgrade libmagickcore-6.q16-6Upgrade imagemagickUpgrade libimage-magick-q16-perlUpgrade libmagickwand-6.q16-devUpgrade imagemagick-commonUpgrade imagemagick-6.q16hdriUpgrade libmagickwand-6.q16-6Upgrade libimage-magick-perlUpgrade imagemagick-6.q16Upgrade imagemagick-6-common | Nov 24, 2022 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub