In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Sep 9, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Sep 9, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Sep 9, 2018 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-devel | Apr 1, 2020 | Sep 9, 2018 |
| Debian | — | Upgrade imagemagick | Feb 19, 2019 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Sep 9, 2018 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Sep 9, 2018 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.14-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Sep 9, 2018 |
| Oracle_linux | — | Upgrade emacsUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade inkscapeUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade autotrace-develUpgrade ImageMagick-docUpgrade emacs-noxUpgrade autotraceUpgrade inkscape-viewUpgrade emacs-elUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick | Oct 5, 2022 | Sep 11, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-c++No solution existsUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape-debuginfo | Apr 1, 2020 | Sep 9, 2018 |
| Suse | — | Upgrade perl-graphicsmagickUpgrade libMagickCore1-32bitUpgrade libMagickWand1-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-6-suseUpgrade libMagickWand1Upgrade libMagickCore1Upgrade imagemagickUpgrade imagemagick-develUpgrade libGraphicsMagick2Upgrade graphicsmagickUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-develUpgrade libmagick-6_q16-3Upgrade libMagick++1Upgrade imagemagick-config-6-upstreamUpgrade libmagickcore-6_q16-1 | Sep 25, 2018 | Sep 9, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagickcore5-extra | Oct 17, 2018 | Sep 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub