In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Sep 1, 2018 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Sep 1, 2018 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-debuginfo | Apr 1, 2020 | Sep 1, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Sep 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Sep 1, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 1, 2018 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade emacs-noxUpgrade autotraceUpgrade emacs-commonUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade inkscapeUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagick-perlUpgrade emacs-elUpgrade inkscape-view | Oct 5, 2022 | Jul 23, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develNo solution existsUpgrade autotrace-debuginfoUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Sep 1, 2018 |
| Suse | — | Upgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade imagemagick-devel-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade libmagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade perl-PerlMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick | Oct 6, 2018 | Sep 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub