ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-devel | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade ImageMagick | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade emacs-filesystemUpgrade inkscape-docsUpgrade inkscape-viewUpgrade emacsUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade emacs-elUpgrade emacs-commonUpgrade ImageMagickUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade inkscapeUpgrade emacs-terminalUpgrade autotrace-develUpgrade ImageMagick-develUpgrade autotrace | Oct 5, 2022 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade autotraceUpgrade inkscape-viewUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-docs | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-7_Q16HDRI4Upgrade libMagick++-6_Q16-3Upgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-develUpgrade ImageMagickUpgrade libmagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-extra | Jul 30, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade perlmagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-6Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-5v5 | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub