The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade ImageMagick | Jun 23, 2016 | Jun 16, 2016 |
| Centos_linux | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-doc | Jul 22, 2016 | Jun 16, 2016 |
| Debian | — | Upgrade graphicsmagick | Dec 26, 2016 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | Feb 27, 2017 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Jun 16, 2016 | Jun 16, 2016 |
| Redhat_linux | — | No solution existsUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perl | Jul 29, 2016 | Jun 16, 2016 |
| Suse | — | Upgrade GraphicsMagickUpgrade libGraphicsMagick2Upgrade perl-GraphicsMagick | Jul 26, 2016 | Jun 16, 2016 |
| Ubuntu | — | Upgrade graphicsmagick | Nov 19, 2024 | Feb 27, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub