ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Oct 14, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Oct 14, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfo | Apr 1, 2020 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade emacs-filesystemUpgrade emacsUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade emacs-noxUpgrade autotraceUpgrade inkscapeUpgrade emacs-commonUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade emacs-terminalUpgrade emacs-elUpgrade ImageMagick | Oct 5, 2022 | Jul 14, 2019 |
| Redhat_linux | — | Upgrade autotrace-debuginfoNo solution existsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docs | Apr 1, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagickUpgrade libMagick++-develUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-extraUpgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade imagemagick-devel-32bitUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1 | Aug 9, 2024 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub