In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jun 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Jun 20, 2018 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Jun 20, 2018 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick | Apr 1, 2020 | Jun 20, 2018 |
| Debian | — | Upgrade imagemagick | Jul 16, 2018 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 27, 2018 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 27, 2018 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Jun 20, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Jun 20, 2018 |
| Oracle_linux | — | Upgrade emacsUpgrade inkscape-docsUpgrade inkscapeUpgrade emacs-elUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade emacs-noxUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade emacs-common | Oct 5, 2022 | Jun 19, 2018 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade autotrace-debuginfoNo solution existsUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade inkscape | Apr 1, 2020 | Jun 20, 2018 |
| Suse | — | Upgrade libMagick++-7_Q16HDRI4Upgrade libMagick++-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-docUpgrade libMagickWand-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-6_Q16-3Upgrade libMagick++1Upgrade ImageMagick-develUpgrade libMagickWand1-32bitUpgrade imagemagick-devel-32bitUpgrade libMagickWand1Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore1-32bitUpgrade perl-PerlMagickUpgrade libMagickCore1 | Jul 29, 2018 | Jun 20, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5 | Jul 24, 2018 | Jun 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub