In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-debuginfo | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade inkscapeUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade emacs-elUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade emacs-terminalUpgrade inkscapeUpgrade ImageMagick-perlUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade emacsUpgrade emacs-noxUpgrade autotrace-develUpgrade autotrace | Oct 5, 2022 | Aug 10, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-c++No solution existsUpgrade inkscapeUpgrade autotraceUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-perl | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-6_Q16-3Upgrade libMagick++-develUpgrade libMagickWand-6_Q16-1 | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7 | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub