An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotraceUpgrade inkscapeUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade emacsUpgrade emacs-elUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade emacs-commonUpgrade inkscapeUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade ImageMagick-devel | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagickUpgrade autotrace-develNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-devel | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagickUpgrade perl-PerlMagickUpgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade libMagickCore1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagick++1Upgrade libMagickWand1 | May 3, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub