In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Oct 1, 2024 | Feb 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-perl | Oct 28, 2020 | Feb 5, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php54-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagick | Jul 18, 2020 | Feb 4, 2019 |
| Centos_linux | — | Upgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade autotraceUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade inkscape-view | Apr 1, 2020 | Feb 5, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Feb 5, 2019 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick6-nox11Upgrade ImageMagick6Upgrade ImageMagick7-nox11 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Apr 2, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 1, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 3, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Feb 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Feb 5, 2019 |
| Oracle_linux | — | Upgrade autotraceUpgrade emacsUpgrade inkscape-docsUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade emacs-commonUpgrade emacs-noxUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade emacs-elUpgrade ImageMagick-perlUpgrade ImageMagick-docUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade ImageMagick | Oct 5, 2022 | Jan 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++Upgrade autotrace-develUpgrade autotraceNo solution existsUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade inkscapeUpgrade ImageMagickUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-docs | Apr 1, 2020 | Feb 5, 2019 |
| Suse | — | Upgrade libMagickWand1-32bitUpgrade imagemagick-config-6-suseUpgrade libMagickWand1Upgrade imagemagick-config-7-suseUpgrade imagemagick-config-7-upstreamUpgrade libmagick-7_q16hdri4Upgrade libGraphicsMagick2Upgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade imagemagick-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickcore-6_q16-1Upgrade imagemagickUpgrade imagemagick-extraUpgrade graphicsmagickUpgrade libmagickwand-6_q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade perl-graphicsmagickUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-docUpgrade libmagick-devel-32bitUpgrade libMagick++1Upgrade imagemagick-devel-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-develUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagick-6_q16-3Upgrade libmagickcore-7_q16hdri6 | Apr 1, 2019 | Feb 4, 2019 |
| Ubuntu | — | Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade imagemagickUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro) | Jun 25, 2019 | Feb 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub