In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Apr 16, 2018 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-devel | Apr 1, 2020 | Apr 16, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade emacs-elUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagick-docUpgrade emacs-commonUpgrade inkscape-viewUpgrade inkscapeUpgrade emacs-filesystemUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade ImageMagick-perl | Oct 5, 2022 | Apr 17, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-viewNo solution existsUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade autotraceUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade autotrace-debuginfo | Apr 1, 2020 | Apr 16, 2018 |
| Suse | — | Upgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-6_q16-1Upgrade libmagick-develUpgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-config-6-suseUpgrade libMagickWand1Upgrade perl-perlmagickUpgrade imagemagickUpgrade libMagickWand1-32bitUpgrade graphicsmagickUpgrade libMagickCore1Upgrade libMagick++1Upgrade perl-graphicsmagickUpgrade libGraphicsMagick2Upgrade imagemagick-develUpgrade libMagickCore1-32bit | May 3, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extra | Jun 19, 2018 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub