In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-doc | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade php56-pecl-imagickUpgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade ImageMagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-perl | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade inkscape-viewUpgrade autotrace-develUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade ImageMagick-develUpgrade autotraceUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade emacsUpgrade emacs-terminalUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade emacs-elUpgrade inkscapeUpgrade emacs-nox | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscape-viewUpgrade ImageMagick-docNo solution existsUpgrade autotrace-debuginfoUpgrade inkscape-debuginfo | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade ImageMagick-extraUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSEUpgrade imagemagick-devel-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bit | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickwand-6.q16hdri-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickwand-6.q16hdri-3Upgrade libmagickcore-6.q16hdri-6-extraUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand-6.q16-2Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickwand-6.q16-6Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16hdri-7Upgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6.q16hdri-3Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3-extraUpgrade imagemagick-6.q16hdriUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagickUpgrade libmagickwand-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub