ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagickUpgrade inkscape-viewUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade autotraceUpgrade inkscape-docsUpgrade emacsUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade emacs-elUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade emacs-noxUpgrade ImageMagick-develUpgrade emacs-commonUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-perl | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-viewUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotrace-debuginfoNo solution existsUpgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade ImageMagick-c++ | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libmagick-7_q16hdri4Upgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagickUpgrade libmagick-devel-32bitUpgrade libmagick-develUpgrade imagemagick-extraUpgrade perl-perlmagickUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-develUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-config-7-suseUpgrade imagemagick-docUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickwand-7_q16hdri6-32bit | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-dev (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub