In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-devel | Oct 28, 2020 | Jun 1, 2018 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Jun 1, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade autotraceUpgrade inkscapeUpgrade inkscape-docsUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-devel | Apr 1, 2020 | Jun 1, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jun 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.40-0.175.3.32.0.1.0 on Solaris 11.3 | Aug 24, 2018 | Jun 1, 2018 |
| Oracle_linux | — | Upgrade emacs-elUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade emacs-noxUpgrade emacs-terminalUpgrade emacsUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade emacs-filesystemUpgrade inkscape-view | Oct 5, 2022 | Jan 4, 2018 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoNo solution existsUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-devel | Apr 1, 2020 | Jun 1, 2018 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSE | Nov 23, 2018 | Jun 1, 2018 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 | Jun 19, 2018 | Jun 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub