In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-doc | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php-pecl-imagickUpgrade ImageMagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade emacsUpgrade emacs-elUpgrade emacs-terminalUpgrade inkscape-docsUpgrade emacs-filesystemUpgrade inkscapeUpgrade emacs-noxUpgrade emacs-commonUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade autotrace-devel | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-docUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade ImageMagickUpgrade inkscape-viewNo solution existsUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscapeUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade autotrace-develUpgrade inkscape-docsUpgrade autotraceUpgrade ImageMagick-c++ | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagickUpgrade ImageMagick-extraUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade libMagick++-6_Q16-3Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade imagemagick-devel-32bit | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagickwand-6.q16hdri-3Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagickwand-6.q16hdri-6Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16hdri-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagickUpgrade libmagick++-6.q16hdri-7Upgrade libmagickwand-6.q16-3Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16-3-extra | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub