An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscape-docs | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade emacs-noxUpgrade emacs-elUpgrade emacsUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-terminalUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacs-filesystem | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-viewNo solution existsUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-devel | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickWand1Upgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bitUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstream | May 3, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade libmagickcore-6.q16-3 | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub