In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade autotrace-devel | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Feb 19, 2019 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade emacsUpgrade emacs-commonUpgrade ImageMagick-develUpgrade autotraceUpgrade emacs-filesystemUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade inkscapeUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade emacs-elUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perl | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade autotrace-debuginfoNo solution existsUpgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagickUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-devel | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade libMagickCore1-32bitUpgrade graphicsmagickUpgrade imagemagickUpgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade perl-graphicsmagickUpgrade libMagickWand1Upgrade imagemagick-develUpgrade libMagickCore1Upgrade perl-perlmagickUpgrade imagemagick-config-6-suseUpgrade libMagick++1Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade libmagickcore-6_q16-1Upgrade libmagick-develUpgrade libmagickwand-6_q16-1 | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore5-extraUpgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extra | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub