In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Aug 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Oct 28, 2020 | Aug 12, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Aug 12, 2019 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade inkscapeUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++ | Apr 1, 2020 | Aug 12, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 12, 2019 |
| Oracle_linux | — | Upgrade inkscapeUpgrade inkscape-viewUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade emacs-elUpgrade emacs-filesystemUpgrade emacsUpgrade autotrace-develUpgrade emacs-commonUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade emacs-noxUpgrade autotraceUpgrade ImageMagickUpgrade ImageMagick-c++ | Oct 5, 2022 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade inkscapeNo solution existsUpgrade autotraceUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-doc | Apr 1, 2020 | Aug 12, 2019 |
| Suse | — | Upgrade libmagick-devel-32bitUpgrade imagemagick-extraUpgrade imagemagickUpgrade libmagick-develUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-7_q16hdri4Upgrade imagemagick-docUpgrade imagemagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-develUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-7-suseUpgrade libmagickcore-7_q16hdri6-32bit | Nov 16, 2019 | Aug 12, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-3-extra | Nov 15, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub