WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Oct 28, 2020 | Mar 20, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-perlUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-c++ | Apr 1, 2020 | Mar 20, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp1 | — | — | May 29, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade emacs-filesystemUpgrade emacsUpgrade emacs-terminalUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotraceUpgrade ImageMagickUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade emacs-noxUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscapeUpgrade emacs-elUpgrade ImageMagick-devel | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade autotrace-debuginfoNo solution existsUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perl | Apr 1, 2020 | Mar 20, 2018 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade libMagick++1Upgrade libMagickWand-6_Q16-1Upgrade libMagickCore1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-upstream | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | — | Upgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5 | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub