In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade autotrace-develUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-doc | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade ImageMagick-develUpgrade emacsUpgrade emacs-noxUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-docUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade inkscape-viewUpgrade emacs-elUpgrade autotraceUpgrade inkscape-docsUpgrade emacs-terminal | Oct 5, 2022 | Aug 8, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develNo solution existsUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade imagemagickUpgrade libmagickcore-6_q16-1Upgrade libmagick-develUpgrade imagemagick-config-6-suseUpgrade perl-perlmagickUpgrade imagemagick-devel | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6 | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub