In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-doc | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Feb 19, 2019 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade emacs-elUpgrade ImageMagickUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade ImageMagick-perlUpgrade emacsUpgrade ImageMagick-docUpgrade autotrace-develUpgrade autotraceUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade emacs-noxUpgrade ImageMagick-devel | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoNo solution existsUpgrade inkscape-docsUpgrade inkscape-view | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade libMagickCore1Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-6_Q16-3Upgrade GraphicsMagickUpgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagick++1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bit | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagickcore5-extra | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub