WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-imagemagick6 | Oct 1, 2024 | Mar 20, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-imagemagickamazon-linux-ami-2-upgrade-imagemagick-camazon-linux-ami-2-upgrade-imagemagick-c-develamazon-linux-ami-2-upgrade-imagemagick-debuginfoamazon-linux-ami-2-upgrade-imagemagick-develamazon-linux-ami-2-upgrade-imagemagick-docamazon-linux-ami-2-upgrade-imagemagick-perl | Oct 28, 2020 | Mar 20, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-imagemagickamazon-linux-upgrade-php-pecl-imagickamazon-linux-upgrade-php54-pecl-imagickamazon-linux-upgrade-php55-pecl-imagickamazon-linux-upgrade-php56-pecl-imagickamazon-linux-upgrade-php70-pecl-imagickamazon-linux-upgrade-php71-pecl-imagickamazon-linux-upgrade-php72-pecl-imagick | Jul 18, 2020 | Mar 20, 2018 |
| Centos_linux | — | centos-upgrade-autotracecentos-upgrade-autotrace-debuginfocentos-upgrade-autotrace-develcentos-upgrade-imagemagickcentos-upgrade-imagemagick-ccentos-upgrade-imagemagick-c-develcentos-upgrade-imagemagick-debuginfocentos-upgrade-imagemagick-develcentos-upgrade-imagemagick-doccentos-upgrade-imagemagick-perlcentos-upgrade-inkscapecentos-upgrade-inkscape-debuginfocentos-upgrade-inkscape-docscentos-upgrade-inkscape-view | Apr 1, 2020 | Mar 20, 2018 |
| Debian | debian-upgrade-imagemagick | Aug 19, 2020 | Mar 20, 2018 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-imagemagickhuawei-euleros-2_0_sp1-upgrade-imagemagick-c++huawei-euleros-2_0_sp1-upgrade-imagemagick-perl | May 29, 2018 | Mar 20, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-imagemagickhuawei-euleros-2_0_sp2-upgrade-imagemagick-c++huawei-euleros-2_0_sp2-upgrade-imagemagick-perl | May 3, 2018 | Mar 20, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-imagemagickhuawei-euleros-2_0_sp3-upgrade-imagemagick-c++huawei-euleros-2_0_sp3-upgrade-imagemagick-perl | Jul 3, 2018 | Mar 20, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-imagemagickhuawei-euleros-2_0_sp5-upgrade-imagemagick-c++huawei-euleros-2_0_sp5-upgrade-imagemagick-libshuawei-euleros-2_0_sp5-upgrade-imagemagick-perl | Nov 19, 2019 | Mar 20, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-autotraceoracle-linux-upgrade-autotrace-develoracle-linux-upgrade-emacsoracle-linux-upgrade-emacs-commonoracle-linux-upgrade-emacs-eloracle-linux-upgrade-emacs-filesystemoracle-linux-upgrade-emacs-noxoracle-linux-upgrade-emacs-terminaloracle-linux-upgrade-imagemagickoracle-linux-upgrade-imagemagick-coracle-linux-upgrade-imagemagick-c-develoracle-linux-upgrade-imagemagick-develoracle-linux-upgrade-imagemagick-docoracle-linux-upgrade-imagemagick-perloracle-linux-upgrade-inkscapeoracle-linux-upgrade-inkscape-docsoracle-linux-upgrade-inkscape-view | Oct 5, 2022 | Mar 15, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-autotraceredhat-upgrade-autotrace-debuginforedhat-upgrade-autotrace-develredhat-upgrade-imagemagickredhat-upgrade-imagemagick-credhat-upgrade-imagemagick-c-develredhat-upgrade-imagemagick-debuginforedhat-upgrade-imagemagick-develredhat-upgrade-imagemagick-docredhat-upgrade-imagemagick-perlredhat-upgrade-inkscaperedhat-upgrade-inkscape-debuginforedhat-upgrade-inkscape-docsredhat-upgrade-inkscape-view | Apr 1, 2020 | Mar 20, 2018 | |
| Suse | — | suse-upgrade-imagemagicksuse-upgrade-imagemagick-config-6-susesuse-upgrade-imagemagick-config-6-upstreamsuse-upgrade-imagemagick-develsuse-upgrade-libmagick-1suse-upgrade-libmagick-6_q16-3suse-upgrade-libmagick-develsuse-upgrade-libmagickcore-6_q16-1suse-upgrade-libmagickcore-6_q16-1-32bitsuse-upgrade-libmagickcore1suse-upgrade-libmagickcore1-32bitsuse-upgrade-libmagickwand-6_q16-1suse-upgrade-libmagickwand1suse-upgrade-libmagickwand1-32bitsuse-upgrade-perl-perlmagick | Apr 4, 2018 | Mar 20, 2018 |
| Ubuntu | ubuntu-upgrade-imagemagickubuntu-upgrade-imagemagick-6-q16ubuntu-upgrade-libmagick-5ubuntu-upgrade-libmagick-6-q16-5v5ubuntu-upgrade-libmagick-6-q16-7ubuntu-upgrade-libmagickcore-6-q16-2ubuntu-upgrade-libmagickcore-6-q16-2-extraubuntu-upgrade-libmagickcore-6-q16-3ubuntu-upgrade-libmagickcore-6-q16-3-extraubuntu-upgrade-libmagickcore5ubuntu-upgrade-libmagickcore5-extra | Jun 19, 2018 | Mar 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub