ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-devel | Oct 28, 2020 | Jun 26, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Jun 26, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Jun 26, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jun 26, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jun 26, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-docUpgrade emacs-filesystemUpgrade ImageMagickUpgrade inkscape-docsUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade emacs-elUpgrade emacs-terminalUpgrade inkscapeUpgrade emacsUpgrade ImageMagick-perl | Oct 5, 2022 | Jun 26, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade inkscapeUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-docsNo solution existsUpgrade inkscape-view | Apr 1, 2020 | Jun 26, 2019 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickcore-7_q16hdri6Upgrade libmagick-6_q16-3Upgrade imagemagick-docUpgrade libmagickwand-7_q16hdri6-32bitUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-extraUpgrade imagemagick-config-6-suseUpgrade perl-perlmagickUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-config-7-suseUpgrade libmagickwand-6_q16-1Upgrade imagemagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-develUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagick-config-6-upstreamUpgrade libmagick-develUpgrade imagemagick-devel-32bit | Jul 30, 2019 | Jun 26, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagickUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro) | Nov 15, 2019 | Jun 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub