An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-doc | Oct 28, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Mar 26, 2018 |
| Centos_linux | — | Upgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-devel | Apr 1, 2020 | Mar 27, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade emacs-terminalUpgrade emacs-noxUpgrade emacs-elUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade inkscape | Oct 5, 2022 | Sep 30, 2017 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-docUpgrade autotrace-develNo solution existsUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Mar 27, 2018 |
| Suse | — | Upgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade libMagick++1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade GraphicsMagickUpgrade libGraphicsMagick2Upgrade libMagickCore1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade perl-PerlMagick | Apr 21, 2018 | Mar 26, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade imagemagick | Jun 19, 2018 | Mar 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub