The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-doc | Oct 28, 2020 | Apr 23, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Apr 23, 2019 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-devel | Apr 1, 2020 | Apr 23, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Apr 23, 2019 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick6-nox11Upgrade ImageMagick6Upgrade ImageMagick7-nox11 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Apr 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 23, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade ImageMagick-docUpgrade emacs-elUpgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade emacs-commonUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagickUpgrade emacs-filesystemUpgrade emacsUpgrade inkscape-docsUpgrade inkscape-view | Oct 5, 2022 | Feb 5, 2019 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-perl | Apr 1, 2020 | Apr 23, 2019 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-extraUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-6-SUSEUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-config-7-upstreamUpgrade ImageMagick-docUpgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel-32bit | Jun 25, 2019 | Apr 23, 2019 |
| Ubuntu | — | Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro) | Jun 25, 2019 | Apr 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub