WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Mar 20, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Mar 20, 2018 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade inkscape-viewUpgrade autotraceUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Mar 20, 2018 |
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp1 | — | — | May 29, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Mar 20, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 19, 2019 | Mar 20, 2018 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-elUpgrade inkscapeUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade inkscape-docsUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagickUpgrade emacsUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade emacs-filesystem | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade ImageMagickUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develNo solution exists | Apr 1, 2020 | Mar 20, 2018 |
| Suse | — | Upgrade libMagick++1Upgrade imagemagick-develUpgrade libmagick-develUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade libMagickCore1Upgrade libmagick-6_q16-3Upgrade imagemagickUpgrade libMagickCore1-32bitUpgrade libmagickwand-6_q16-1Upgrade libMagickWand1Upgrade libMagickWand1-32bitUpgrade imagemagick-config-6-suseUpgrade perl-perlmagick | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade libmagickcore5-extra | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub