In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Aug 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++ | Oct 28, 2020 | Aug 12, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Aug 12, 2019 |
| Centos_linux | — | Upgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Aug 12, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 12, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade emacs-noxUpgrade emacs-commonUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade autotraceUpgrade inkscape-docsUpgrade emacsUpgrade inkscapeUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacs-el | Oct 5, 2022 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade inkscape-viewUpgrade inkscape-docsUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoNo solution existsUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace | Apr 1, 2020 | Aug 12, 2019 |
| Suse | — | Upgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-docUpgrade imagemagick-config-7-upstreamUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-extraUpgrade libmagick-devel-32bitUpgrade ImageMagick-devel | Nov 16, 2019 | Aug 12, 2019 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-8 | Nov 15, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub