In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade inkscape | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade emacs-commonUpgrade emacs-terminalUpgrade emacs-elUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-noxUpgrade emacsUpgrade ImageMagick-develUpgrade inkscape | Oct 5, 2022 | Aug 8, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagickUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-debuginfoNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotrace | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagick | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-8 | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub