In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-doc | Oct 28, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Apr 16, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Apr 16, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacsUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade autotraceUpgrade emacs-elUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 5, 2022 | Apr 17, 2018 |
| Redhat_linux | — | Upgrade autotrace-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-perl | Apr 1, 2020 | Apr 16, 2018 |
| Suse | — | Upgrade libmagick-develUpgrade libmagickcore-6_q16-1-32bitUpgrade libMagickWand1Upgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-suseUpgrade libmagickwand-6_q16-1Upgrade libMagickCore1Upgrade perl-graphicsmagickUpgrade imagemagickUpgrade libGraphicsMagick2Upgrade libMagickCore1-32bitUpgrade graphicsmagickUpgrade imagemagick-develUpgrade libMagickWand1-32bitUpgrade libMagick++1 | May 3, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub