In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Aug 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Aug 12, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Aug 12, 2019 |
| Centos_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade autotraceUpgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagickUpgrade ImageMagick-perl | Apr 1, 2020 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 12, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade autotraceUpgrade autotrace-develUpgrade emacsUpgrade ImageMagick-perlUpgrade emacs-noxUpgrade inkscapeUpgrade emacs-terminalUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade emacs-elUpgrade inkscape-viewUpgrade emacs-filesystem | Oct 5, 2022 | Apr 21, 2019 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade autotraceUpgrade ImageMagick-develUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade autotrace-debuginfoNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docs | Apr 1, 2020 | Aug 12, 2019 |
| Suse | — | Upgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-develUpgrade libmagick-devel-32bitUpgrade imagemagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSEUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-doc | Oct 29, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub