In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-c++ | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade inkscape-docsUpgrade emacs-terminalUpgrade inkscape-viewUpgrade autotraceUpgrade emacs-elUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-noxUpgrade inkscapeUpgrade ImageMagick-develUpgrade emacs | Oct 5, 2022 | Aug 8, 2017 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade autotrace-develNo solution existsUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotraceUpgrade autotrace-debuginfo | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagick++-devel | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro) | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub