In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Oct 1, 2024 | Feb 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfo | Oct 28, 2020 | Feb 5, 2019 |
| Amazon_linux | — | Upgrade php71-pecl-imagickUpgrade php55-pecl-imagickUpgrade ImageMagickUpgrade php54-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php70-pecl-imagick | Jul 18, 2020 | Feb 4, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade inkscapeUpgrade autotraceUpgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade autotrace-debuginfoUpgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-doc | Apr 1, 2020 | Feb 5, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Feb 5, 2019 |
| Freebsd | — | Upgrade ImageMagick7-nox11Upgrade ImageMagick6Upgrade ImageMagick6-nox11Upgrade ImageMagick7 | May 31, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Apr 2, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | May 1, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 3, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | — | Jul 31, 2020 | Feb 5, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Feb 5, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagickUpgrade emacs-filesystemUpgrade autotrace-develUpgrade emacs-elUpgrade ImageMagick-docUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade emacs-commonUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacs-noxUpgrade inkscapeUpgrade inkscape-docsUpgrade inkscape-viewUpgrade emacsUpgrade autotrace | Oct 5, 2022 | Jan 17, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade autotrace-debuginfoUpgrade autotraceUpgrade autotrace-develUpgrade inkscape-debuginfoNo solution existsUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-docs | Apr 1, 2020 | Feb 5, 2019 |
| Suse | — | Upgrade libMagickCore1-32bitUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore1Upgrade libmagickcore-6_q16-1Upgrade libmagick-7_q16hdri4Upgrade libGraphicsMagick2Upgrade imagemagick-config-6-suseUpgrade imagemagick-develUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade imagemagick-config-7-suseUpgrade imagemagickUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-develUpgrade imagemagick-devel-32bitUpgrade imagemagick-extraUpgrade graphicsmagickUpgrade imagemagick-docUpgrade libmagickwand-6_q16-1Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-6_q16-3Upgrade libmagickwand-7_q16hdri6Upgrade libMagick++1Upgrade libmagick-devel-32bitUpgrade perl-graphicsmagickUpgrade libmagickcore-7_q16hdri6Upgrade libmagickcore-6_q16-1-32bit | Apr 1, 2019 | Feb 4, 2019 |
| Ubuntu | — | Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-6.q16 (Ubuntu Pro) | Jun 25, 2019 | Feb 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub