In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-doc | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-c++ | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade inkscapeUpgrade emacs-noxUpgrade ImageMagick-develUpgrade emacsUpgrade ImageMagick-c++Upgrade emacs-filesystemUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade emacs-elUpgrade autotrace | Oct 5, 2022 | Aug 8, 2017 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-c++No solution existsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-6_Q16-1Upgrade perl-PerlMagickUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-6Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade perlmagick (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8 | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub