In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Apr 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-perl | Oct 28, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Apr 29, 2019 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade inkscapeUpgrade autotraceUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Apr 29, 2019 |
| Debian | — | Upgrade imagemagick | May 15, 2019 | Apr 29, 2019 |
| Freebsd | — | Upgrade ImageMagick6Upgrade ImageMagick7-nox11Upgrade ImageMagick6-nox11Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | May 30, 2019 | Apr 29, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade emacs-noxUpgrade autotrace-develUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade inkscapeUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade autotrace | Oct 5, 2022 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade autotraceNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Apr 29, 2019 |
| Suse | — | Upgrade ImageMagick-config-7-SUSEUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade imagemagick-config-7-upstreamUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade ImageMagick-extraUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI4Upgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bit | Jun 25, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-7Upgrade libmagickwand5 (Ubuntu Pro) | Jun 25, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub