ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Sep 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-devel | Oct 28, 2020 | Sep 23, 2019 |
| Amazon_linux | — | Upgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagick | Jul 18, 2020 | Sep 23, 2019 |
| Centos_linux | — | Upgrade inkscape-debuginfoUpgrade inkscapeUpgrade inkscape-viewUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Sep 23, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Sep 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Sep 23, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade emacs-noxUpgrade emacs-filesystemUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade autotraceUpgrade inkscapeUpgrade inkscape-docsUpgrade emacsUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade inkscape-viewUpgrade ImageMagickUpgrade emacs-el | Oct 5, 2022 | Sep 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade autotraceUpgrade ImageMagick-debuginfoUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoNo solution existsUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick | Apr 1, 2020 | Sep 23, 2019 |
| Suse | — | Upgrade imagemagick-config-7-suseUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-7-upstreamUpgrade imagemagickUpgrade libmagick-7_q16hdri4Upgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade imagemagick-develUpgrade imagemagick-config-6-suseUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-extraUpgrade libmagick-devel-32bitUpgrade imagemagick-devel-32bitUpgrade imagemagick-docUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libmagickwand-6_q16-1Upgrade libmagickwand-7_q16hdri6Upgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel | Oct 26, 2019 | Sep 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-8Upgrade libmagick++-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro) | Nov 15, 2019 | Sep 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub