In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Aug 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick | Oct 28, 2020 | Aug 12, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Aug 12, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscapeUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-devel | Apr 1, 2020 | Aug 12, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 12, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade inkscape-docsUpgrade inkscape-viewUpgrade emacs-filesystemUpgrade inkscapeUpgrade emacsUpgrade emacs-terminalUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade emacs-commonUpgrade autotraceUpgrade emacs-noxUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-devel | Oct 5, 2022 | Apr 18, 2019 |
| Redhat_linux | — | Upgrade autotraceNo solution existsUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade autotrace-debuginfoUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Aug 12, 2019 |
| Suse | — | Upgrade perl-perlmagickUpgrade imagemagick-config-7-upstreamUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-docUpgrade imagemagick-develUpgrade libmagickcore-7_q16hdri6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-suseUpgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4Upgrade libmagick-devel-32bitUpgrade imagemagick-extraUpgrade imagemagickUpgrade libmagick-develUpgrade libmagick-7_q16hdri4-32bit | Nov 16, 2019 | Aug 12, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-3-extra | Nov 15, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub