ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Jun 26, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Jun 26, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++ | Apr 1, 2020 | Jun 26, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jun 26, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jun 26, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jun 26, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade emacs-noxUpgrade inkscapeUpgrade autotrace-develUpgrade emacs-terminalUpgrade emacs | Oct 5, 2022 | Jun 26, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade autotraceUpgrade inkscape-debuginfoUpgrade inkscape-docsNo solution exists | Apr 1, 2020 | Jun 26, 2019 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4Upgrade libmagickcore-7_q16hdri6Upgrade libmagick-7_q16hdri4-32bitUpgrade perl-perlmagickUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-docUpgrade imagemagick-develUpgrade imagemagick-config-6-upstreamUpgrade imagemagick-config-6-suseUpgrade libmagick-develUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-6_q16-1Upgrade libmagick-devel-32bitUpgrade libmagick-6_q16-3Upgrade imagemagick-extraUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-suseUpgrade imagemagickUpgrade imagemagick-config-7-upstream | Jul 30, 2019 | Jun 26, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagickUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7 | Nov 15, 2019 | Jun 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub