The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-doc | Oct 28, 2020 | Jul 10, 2017 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Jul 10, 2017 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Apr 1, 2020 | Jul 10, 2017 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jul 10, 2017 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade autotraceUpgrade emacsUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade ImageMagickUpgrade autotrace-develUpgrade emacs-noxUpgrade inkscapeUpgrade ImageMagick-c++Upgrade emacs-elUpgrade emacs-commonUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 5, 2022 | May 4, 2017 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade inkscape-debuginfoNo solution existsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade inkscape-docs | Apr 1, 2020 | Jul 10, 2017 |
| Suse | — | Upgrade libMagickWand1Upgrade libMagickWand1-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagick++-develUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1Upgrade libMagick++-6_Q16-3Upgrade libMagick++1Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1-32bit | Feb 21, 2018 | Jul 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub