ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perl | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade inkscapeUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade autotrace-develUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade autotraceUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagick-doc | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade autotrace-develNo solution existsUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade inkscapeUpgrade inkscape-view | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade ImageMagick-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagickUpgrade ImageMagick-docUpgrade libMagick++-develUpgrade ImageMagick-extraUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-7-SUSEUpgrade imagemagick-devel-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6 | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade imagemagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extra | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub