ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++ | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade autotrace-debuginfoUpgrade autotrace | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade emacs-commonUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade inkscapeUpgrade inkscape-viewUpgrade autotraceUpgrade emacs-elUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagick | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-perlUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-develNo solution existsUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade ImageMagick-doc | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-config-7-SUSEUpgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-doc | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickwand-dev (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub