ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Sep 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 28, 2020 | Sep 23, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Sep 23, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick | Apr 1, 2020 | Sep 23, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Sep 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade emacsUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade ImageMagickUpgrade autotraceUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacs-elUpgrade inkscapeUpgrade emacs-common | Oct 5, 2022 | Sep 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade autotraceUpgrade inkscape-viewNo solution existsUpgrade inkscapeUpgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Sep 23, 2019 |
| Suse | — | Upgrade imagemagick-extraUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-7_q16hdri6Upgrade libmagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-config-7-suseUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-docUpgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-6-suseUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-7-upstreamUpgrade libmagick-develUpgrade imagemagick-devel-32bitUpgrade perl-perlmagickUpgrade imagemagick-develUpgrade libmagick-7_q16hdri4 | Oct 26, 2019 | Sep 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-8Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick-6.q16 | Nov 15, 2019 | Sep 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub