ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-devel | Oct 28, 2020 | May 8, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | May 8, 2018 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++-devel | Apr 1, 2020 | May 8, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | May 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | May 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | May 8, 2018 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade emacsUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscapeUpgrade autotraceUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade emacs-terminalUpgrade emacs-elUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-nox | Oct 5, 2022 | Mar 24, 2018 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-c++-develNo solution existsUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-doc | Apr 1, 2020 | May 8, 2018 |
| Suse | — | Upgrade libgraphicsmagickwand-q16-2Upgrade imagemagick-devel-32bitUpgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libgraphicsmagick-q16-3Upgrade ImageMagick-docUpgrade libMagick++-7_Q16HDRI4Upgrade libgraphicsmagick-develUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-extraUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade libgraphicsmagick3-configUpgrade libMagickWand1Upgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagickcore-7_q16hdri6-32bitUpgrade perl-GraphicsMagickUpgrade imagemagick-config-7-upstreamUpgrade libgraphicsmagick-q16-12Upgrade ImageMagick-config-6-upstreamUpgrade graphicsmagick-develUpgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade ImageMagickUpgrade libGraphicsMagick2Upgrade libMagick++-6_Q16-3Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libmagick-devel-32bitUpgrade GraphicsMagick | Jun 30, 2018 | May 8, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extra | Jun 19, 2018 | May 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub