ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-devel | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade autotraceUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade emacs-filesystemUpgrade emacs-noxUpgrade autotraceUpgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade emacsUpgrade autotrace-develUpgrade emacs-commonUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade emacs-terminalUpgrade emacs-elUpgrade ImageMagick-doc | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | No solution existsUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotrace-debuginfo | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-extraUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade imagemagick-devel-32bitUpgrade imagemagick-config-7-upstreamUpgrade perl-PerlMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade ImageMagickUpgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6 | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro) | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub