In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Dec 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Dec 24, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Dec 24, 2019 |
| Centos_linux | — | Upgrade inkscape-viewUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscape | Apr 1, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade imagemagick | Jan 2, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.91-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade inkscapeUpgrade emacs-elUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade emacsUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade emacs-commonUpgrade autotrace-develUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-doc | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade inkscapeUpgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscape-viewUpgrade inkscape-debuginfoNo solution existsUpgrade autotrace-debuginfoUpgrade ImageMagick-doc | Apr 1, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade ImageMagick-extraUpgrade ImageMagick-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagick-devel-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-7_Q16HDRI4Upgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagickCore-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-7-SUSEUpgrade imagemagick-devel-32bitUpgrade ImageMagick-doc | Feb 6, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16hdri-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickwand-6.q16hdri-3Upgrade libmagickwand-6.q16-2Upgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16-7Upgrade libmagickwand-6.q16hdri-6Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-6-extraUpgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade imagemagickUpgrade libmagick++-6.q16hdri-7Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-3Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3 | Sep 29, 2020 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub