In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jun 25, 2017 | Jun 2, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bitUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagick++-develUpgrade libMagick++1Upgrade libMagickCore1Upgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libMagickWand1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore1-32bit | Feb 21, 2018 | Jun 2, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagick++5Upgrade libmagick++-6.q16-5v5 | Jul 24, 2017 | Jun 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub