In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Apr 16, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade inkscape-docsUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick | Apr 1, 2020 | Apr 16, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade autotraceUpgrade emacs-noxUpgrade ImageMagick-docUpgrade emacs-commonUpgrade emacs-elUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade emacs-terminalUpgrade ImageMagickUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade inkscape-docs | Oct 5, 2022 | Apr 17, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-docNo solution existsUpgrade inkscape-viewUpgrade autotraceUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Apr 16, 2018 |
| Suse | — | Upgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade perl-GraphicsMagickUpgrade libMagickWand1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++1Upgrade GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade libGraphicsMagick2Upgrade libMagickWand-6_Q16-1Upgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagick++-6_Q16-3Upgrade perl-PerlMagick | May 3, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub