WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Mar 20, 2018 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagick-doc | Apr 1, 2020 | Mar 20, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp1 | — | — | May 29, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade ImageMagick-c++Upgrade emacs-elUpgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade emacs-terminalUpgrade emacsUpgrade emacs-common | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade inkscapeUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perlNo solution existsUpgrade autotrace-debuginfo | Apr 1, 2020 | Mar 20, 2018 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade libMagickWand-6_Q16-1Upgrade libMagick++1Upgrade libMagickCore1Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade perl-PerlMagickUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bit | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade libmagick++5 | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub