An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++ | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade ImageMagick-develUpgrade autotraceUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfo | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade autotraceUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade emacs-commonUpgrade inkscapeUpgrade inkscape-docsUpgrade emacsUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade emacs-terminalUpgrade autotrace-develUpgrade emacs-el | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade ImageMagickNo solution existsUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscape | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagick++1Upgrade perl-PerlMagickUpgrade libMagick++-develUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagickUpgrade GraphicsMagickUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand1Upgrade perl-GraphicsMagick | Apr 21, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore5 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub