ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Sep 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++ | Oct 28, 2020 | Sep 23, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagick | Jul 18, 2020 | Sep 23, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade inkscape-viewUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-doc | Apr 1, 2020 | Sep 23, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Sep 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade ImageMagick-develUpgrade emacs-noxUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-docUpgrade emacsUpgrade emacs-filesystemUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagickUpgrade inkscape-docs | Oct 5, 2022 | Sep 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade autotraceUpgrade autotrace-debuginfoUpgrade inkscape-viewNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-perl | Apr 1, 2020 | Sep 23, 2019 |
| Suse | — | Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-7_Q16HDRI6Upgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-extraUpgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagick++-develUpgrade libmagick-devel-32bit | Oct 26, 2019 | Sep 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-6Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16 | Nov 15, 2019 | Sep 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub