An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-doc | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade emacs-commonUpgrade emacs-elUpgrade ImageMagickUpgrade inkscapeUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade emacsUpgrade inkscape-docsUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-c++-devel | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade ImageMagickNo solution existsUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscape | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++1Upgrade libMagickCore1 | May 3, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub