The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 7, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Sep 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 7, 2017 |
| Suse | — | Upgrade ImageMagickUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade libMagick++1Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade libMagickWand1Upgrade perl-PerlMagick | Dec 20, 2017 | Sep 7, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade imagemagickUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2 | Jun 19, 2018 | Sep 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub