In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Mar 30, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++ | Oct 28, 2020 | Mar 30, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Mar 30, 2019 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Mar 30, 2019 |
| Debian | — | Upgrade imagemagick | Apr 29, 2019 | Mar 30, 2019 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick6-nox11Upgrade ImageMagick6Upgrade ImageMagick7-nox11 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | May 1, 2019 | Mar 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 1, 2019 | Mar 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | May 30, 2019 | Mar 30, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade emacs-noxUpgrade ImageMagick-docUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacsUpgrade emacs-elUpgrade emacs-terminalUpgrade inkscape-docsUpgrade inkscape | Oct 5, 2022 | Mar 28, 2019 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade autotraceUpgrade autotrace-develNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Mar 30, 2019 |
| Suse | — | Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-develUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-docUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade imagemagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI6 | Apr 26, 2019 | Mar 30, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro) | Jun 25, 2019 | Mar 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub