In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | May 9, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | May 9, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagickUpgrade inkscape-view | Apr 1, 2020 | May 9, 2019 |
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | May 9, 2019 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade emacsUpgrade autotrace-develUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade emacs-elUpgrade autotraceUpgrade inkscape-docsUpgrade emacs-terminalUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-common | Oct 5, 2022 | Aug 8, 2017 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-c++No solution existsUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick | Apr 1, 2020 | May 9, 2019 |
| Suse | — | Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade libmagick-develUpgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-suseUpgrade perl-perlmagickUpgrade imagemagick | Jun 27, 2019 | May 9, 2019 |
| Ubuntu | — | Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-6Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro) | Jun 25, 2019 | May 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub