WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Mar 20, 2018 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perl | Apr 1, 2020 | Mar 20, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp1 | — | — | May 29, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade emacs-elUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-develUpgrade inkscapeUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade emacs-commonUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade emacsUpgrade ImageMagick-perlUpgrade autotrace | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-viewNo solution existsUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Mar 20, 2018 |
| Suse | — | Upgrade libmagickwand-6_q16-1Upgrade perl-perlmagickUpgrade imagemagick-config-6-suseUpgrade libMagickCore1-32bitUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-develUpgrade libMagick++1Upgrade imagemagickUpgrade imagemagick-develUpgrade libMagickCore1Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstream | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore5-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2 | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub