An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscapeUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade autotraceUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade emacs-elUpgrade emacs-noxUpgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-docUpgrade inkscapeUpgrade emacs-commonUpgrade emacsUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade emacs-terminal | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade ImageMagick-c++No solution existsUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade autotrace-devel | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagickCore1-32bitUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade ImageMagickUpgrade perl-PerlMagick | May 3, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub