In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Apr 16, 2018 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick | Apr 1, 2020 | Apr 16, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade emacs-terminalUpgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade autotraceUpgrade autotrace-develUpgrade emacs-elUpgrade emacs-commonUpgrade ImageMagick-docUpgrade emacs-nox | Oct 5, 2022 | Apr 17, 2018 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-docNo solution existsUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotraceUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-perl | Apr 1, 2020 | Apr 16, 2018 |
| Suse | — | Upgrade ImageMagick-develUpgrade ImageMagickUpgrade libMagick++-develUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade libMagickCore-6_Q16-1-32bitUpgrade perl-GraphicsMagickUpgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libGraphicsMagick2Upgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade GraphicsMagickUpgrade libMagick++1 | May 3, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub