In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jun 25, 2017 | Jun 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Jun 7, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Jun 7, 2017 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Jun 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 15, 2017 |
| Suse | — | Upgrade libMagick++1Upgrade graphicsmagickUpgrade libmagick-6_q16-3Upgrade libmagick-develUpgrade imagemagick-config-6-upstreamUpgrade imagemagickUpgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade libMagickCore1Upgrade perl-graphicsmagickUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-6_q16-1Upgrade libMagickWand1Upgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade imagemagick-config-6-suseUpgrade libMagickCore1-32bitUpgrade perl-perlmagick | Aug 16, 2017 | Jun 7, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5 | Jul 24, 2017 | Jun 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub