The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-perl | Oct 28, 2020 | Apr 23, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Apr 23, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade autotrace-debuginfo | Apr 1, 2020 | Apr 23, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Apr 23, 2019 |
| Freebsd | — | Upgrade ImageMagick6Upgrade ImageMagick7-nox11Upgrade ImageMagick6-nox11Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Apr 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 23, 2019 |
| Oracle_linux | — | Upgrade emacs-filesystemUpgrade emacsUpgrade inkscape-viewUpgrade inkscape-docsUpgrade emacs-terminalUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade emacs-elUpgrade inkscapeUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade emacs-common | Oct 5, 2022 | Feb 5, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-perlUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoNo solution existsUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade autotrace-devel | Apr 1, 2020 | Apr 23, 2019 |
| Suse | — | Upgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-7-suseUpgrade libmagickwand-7_q16hdri6-32bitUpgrade imagemagick-docUpgrade imagemagick-config-6-suseUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-extraUpgrade libmagickwand-6_q16-1Upgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-6-upstreamUpgrade imagemagickUpgrade libmagick-develUpgrade libmagick-7_q16hdri4Upgrade imagemagick-develUpgrade libmagickcore-6_q16-1Upgrade libmagick-devel-32bitUpgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bit | Jun 25, 2019 | Apr 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5 | Jun 25, 2019 | Apr 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub