An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perl | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade inkscape | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-perlUpgrade autotraceUpgrade autotrace-develUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade emacsUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade inkscapeUpgrade emacs-noxUpgrade emacs-el | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-develNo solution existsUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscape | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade perl-PerlMagickUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libGraphicsMagick2Upgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade GraphicsMagickUpgrade libMagick++1Upgrade perl-GraphicsMagickUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade ImageMagick | Apr 21, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub