In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Apr 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 28, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Apr 29, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade inkscapeUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagickUpgrade autotraceUpgrade inkscape-debuginfo | Apr 1, 2020 | Apr 29, 2019 |
| Debian | — | Upgrade imagemagick | May 15, 2019 | Apr 29, 2019 |
| Freebsd | — | Upgrade ImageMagick6Upgrade ImageMagick7-nox11Upgrade ImageMagick6-nox11Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | May 30, 2019 | Apr 29, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade emacs-commonUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade emacs-elUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade emacsUpgrade emacs-terminalUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade inkscapeUpgrade autotraceUpgrade emacs-filesystemUpgrade ImageMagick-devel | Oct 5, 2022 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade ImageMagickNo solution existsUpgrade inkscape-debuginfoUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Apr 29, 2019 |
| Suse | — | Upgrade imagemagickUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-config-6-upstreamUpgrade imagemagick-docUpgrade imagemagick-devel-32bitUpgrade imagemagick-config-6-suseUpgrade libmagick-7_q16hdri4Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-develUpgrade imagemagick-develUpgrade imagemagick-config-7-upstreamUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade imagemagick-extraUpgrade libmagickwand-6_q16-1Upgrade libmagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade imagemagick-config-7-suseUpgrade libmagick-7_q16hdri4-32bit | Jun 25, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade imagemagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-common (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro) | Jun 25, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub