In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jun 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Jun 20, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Jun 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-c++ | Apr 1, 2020 | Jun 20, 2018 |
| Debian | — | Upgrade imagemagick | Jul 16, 2018 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 27, 2018 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 27, 2018 | Jun 20, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Jun 20, 2018 |
| Oracle_linux | — | Upgrade emacs-filesystemUpgrade ImageMagick-docUpgrade autotraceUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade ImageMagick-perlUpgrade emacs-elUpgrade emacs-terminalUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotrace-develUpgrade emacsUpgrade inkscapeUpgrade emacs-nox | Oct 5, 2022 | Jun 19, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade autotrace-develNo solution existsUpgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Jun 20, 2018 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore1Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagickUpgrade libMagickWand1Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-develUpgrade ImageMagick-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickWand1-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagick++-6_Q16-3Upgrade imagemagick-devel-32bitUpgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++1Upgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore1-32bit | Jul 29, 2018 | Jun 20, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagickcore5-extra | Jul 24, 2018 | Jun 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub