In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Apr 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-perl | Oct 28, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Apr 29, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotraceUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-devel | Apr 1, 2020 | Apr 29, 2019 |
| Debian | — | Upgrade imagemagick | May 15, 2019 | Apr 29, 2019 |
| Freebsd | — | Upgrade ImageMagick7-nox11Upgrade ImageMagick6-nox11Upgrade ImageMagick6Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | May 30, 2019 | Apr 29, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade emacs-terminalUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-filesystemUpgrade ImageMagick-docUpgrade inkscapeUpgrade emacsUpgrade emacs-commonUpgrade emacs-elUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade ImageMagick-c++-devel | Oct 5, 2022 | Apr 27, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagickNo solution existsUpgrade ImageMagick-c++Upgrade autotraceUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Apr 29, 2019 |
| Suse | — | Upgrade imagemagick-extraUpgrade libmagickcore-7_q16hdri6Upgrade libmagick-devel-32bitUpgrade libmagick-6_q16-3Upgrade imagemagick-config-7-suseUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-suseUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-develUpgrade libmagickwand-7_q16hdri6Upgrade perl-perlmagickUpgrade imagemagick-config-6-upstreamUpgrade imagemagick-config-7-upstreamUpgrade libmagickcore-6_q16-1Upgrade imagemagick-docUpgrade imagemagick-develUpgrade libmagick-7_q16hdri4Upgrade imagemagickUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6-32bit | Jun 27, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-8Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extra | Jun 25, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub