In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jul 5, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Jul 5, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 4, 2018 |
| Centos_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade autotraceUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-doc | Apr 1, 2020 | Jul 5, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jul 5, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Jul 4, 2018 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-develUpgrade emacs-commonUpgrade inkscape-viewUpgrade emacs-elUpgrade inkscape-docsUpgrade emacsUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perl | Oct 5, 2022 | Jul 4, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade autotrace-develUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagick-c++-develNo solution existsUpgrade autotrace-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Jul 5, 2018 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 | Jul 24, 2018 | Jul 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub