ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-docs | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade emacs-elUpgrade emacsUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade autotraceUpgrade ImageMagick-c++Upgrade inkscapeUpgrade emacs-noxUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade emacs-terminalUpgrade autotrace-devel | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-docNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libmagick-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagick-extraUpgrade perl-perlmagickUpgrade imagemagickUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-develUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-docUpgrade imagemagick-config-7-suseUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickwand-7_q16hdri6Upgrade libmagickwand-7_q16hdri6-32bit | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-dev (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub