In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Aug 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++ | Oct 28, 2020 | Aug 12, 2019 |
| Amazon_linux | — | Upgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Aug 12, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade autotrace-debuginfoUpgrade inkscape-view | Apr 1, 2020 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 12, 2019 |
| Oracle_linux | — | Upgrade autotrace-develUpgrade emacsUpgrade inkscapeUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade emacs-noxUpgrade autotraceUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade emacs-elUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Oct 5, 2022 | Apr 21, 2019 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoNo solution existsUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Aug 12, 2019 |
| Suse | — | Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade imagemagick-config-7-upstreamUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-extra | Oct 29, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub