ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Sep 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfo | Oct 28, 2020 | Sep 23, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Sep 23, 2019 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace | Apr 1, 2020 | Sep 23, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Sep 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade emacs-commonUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade autotrace-develUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-develUpgrade emacs-noxUpgrade ImageMagick-perlUpgrade emacs | Oct 5, 2022 | Sep 23, 2019 |
| Redhat_linux | — | No solution existsUpgrade ImageMagick-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade autotraceUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade autotrace-devel | Apr 1, 2020 | Sep 23, 2019 |
| Suse | — | Upgrade imagemagick-develUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-config-7-suseUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-6-suseUpgrade imagemagickUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade imagemagick-config-6-upstreamUpgrade libmagick-7_q16hdri4Upgrade imagemagick-devel-32bitUpgrade libmagick-devel-32bitUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-extraUpgrade libmagickwand-7_q16hdri6Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickwand-6_q16-1Upgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libmagick-develUpgrade imagemagick-doc | Oct 26, 2019 | Sep 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extra | Nov 15, 2019 | Sep 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub