ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade autotraceUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade autotrace-devel | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade emacsUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacs-elUpgrade autotrace-develUpgrade emacs-noxUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-docUpgrade emacs-commonUpgrade ImageMagick-c++ | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-docUpgrade autotraceUpgrade autotrace-debuginfoNo solution existsUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade ImageMagick-c++Upgrade inkscape-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-extraUpgrade ImageMagick-config-6-SUSEUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade libMagickCore-6_Q16-1-32bit | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2 | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub