The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Apr 23, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Apr 23, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Apr 23, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Apr 23, 2019 |
| Freebsd | — | Upgrade ImageMagick6-nox11Upgrade ImageMagick7Upgrade ImageMagick6Upgrade ImageMagick7-nox11 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 3, 2020 | Apr 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 23, 2019 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade emacs-elUpgrade ImageMagick-docUpgrade inkscapeUpgrade autotraceUpgrade emacs-terminalUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacsUpgrade emacs-filesystemUpgrade inkscape-docs | Oct 5, 2022 | Feb 5, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develNo solution existsUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perl | Apr 1, 2020 | Apr 23, 2019 |
| Suse | — | Upgrade libmagickcore-7_q16hdri6Upgrade imagemagick-extraUpgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6Upgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-suseUpgrade libmagickwand-7_q16hdri6-32bitUpgrade perl-perlmagickUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-suseUpgrade imagemagick-docUpgrade imagemagick-config-7-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-6-upstreamUpgrade libmagickcore-6_q16-1Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagickUpgrade libmagick-6_q16-3Upgrade libmagick-devel-32bitUpgrade imagemagick-develUpgrade libmagick-devel | Jun 25, 2019 | Apr 23, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5-extra (Ubuntu Pro) | Jun 25, 2019 | Apr 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub