ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscape | Apr 1, 2020 | Jul 5, 2019 |
| Debian | — | Upgrade imagemagick | Aug 19, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade autotraceUpgrade emacsUpgrade emacs-commonUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade emacs-terminalUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-perl | Oct 5, 2022 | Jul 16, 2019 |
| Redhat_linux | — | Upgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagickNo solution existsUpgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-perl | Apr 1, 2020 | Jul 5, 2019 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-devel-32bitUpgrade ImageMagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade imagemagick-config-7-upstream | Aug 22, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 | Nov 15, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub