ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade autotraceUpgrade autotrace-develUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-view | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade emacsUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade emacs-noxUpgrade autotraceUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade inkscape-docsUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade ImageMagick-docUpgrade ImageMagick | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscape-debuginfoNo solution existsUpgrade autotrace-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade inkscape-viewUpgrade inkscapeUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libMagickCore-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade imagemagick-config-7-upstreamUpgrade libMagick++-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-develUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extra | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-6Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade imagemagick (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub