In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | May 18, 2018 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfo | Apr 1, 2020 | May 18, 2018 |
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | May 18, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.30-0.175.3.29.0.1.0 on Solaris 11.3 | Aug 24, 2018 | May 18, 2018 |
| Oracle_linux | — | Upgrade inkscapeUpgrade emacs-terminalUpgrade ImageMagickUpgrade emacs-noxUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade emacs-elUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade emacs-commonUpgrade emacsUpgrade ImageMagick-perl | Oct 5, 2022 | Dec 22, 2017 |
| Redhat_linux | — | No solution existsUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagick-perl | Apr 1, 2020 | May 18, 2018 |
| Suse | — | Upgrade libGraphicsMagick2Upgrade imagemagick-config-6-suseUpgrade libmagickwand-6_q16-1Upgrade libMagickWand1Upgrade perl-perlmagickUpgrade libmagick-6_q16-3Upgrade libMagickWand1-32bitUpgrade imagemagickUpgrade perl-graphicsmagickUpgrade libMagickCore1-32bitUpgrade graphicsmagickUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-develUpgrade libMagick++1Upgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade imagemagick-develUpgrade libMagickCore1 | May 29, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extra | Jun 19, 2018 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub