In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-devel | Oct 28, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | May 18, 2018 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-debuginfo | Apr 1, 2020 | May 18, 2018 |
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | May 18, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.30-0.175.3.29.0.1.0 on Solaris 11.3 | Aug 24, 2018 | May 18, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade ImageMagick-docUpgrade autotrace-develUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade emacs-noxUpgrade ImageMagickUpgrade emacsUpgrade emacs-terminalUpgrade inkscapeUpgrade emacs-elUpgrade ImageMagick-perl | Oct 5, 2022 | Dec 21, 2017 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade inkscape-docsNo solution existsUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade autotrace-develUpgrade autotrace-debuginfo | Apr 1, 2020 | May 18, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagick++5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2 | Jun 19, 2018 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub