A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | May 11, 2021 |
| Debian | — | Upgrade imagemagick | Jun 4, 2021 | May 11, 2021 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick7-nox11 | Nov 4, 2022 | May 13, 2021 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 7, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Aug 10, 2021 | May 11, 2021 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 25, 2021 |
| Suse | — | Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore-7_Q16HDRI10Upgrade imagemagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand-7_Q16HDRI10Upgrade libmagick-devel-32bitUpgrade libMagick++-7_Q16HDRI5Upgrade libMagick++-6_Q16-3Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-config-7-upstreamUpgrade libMagick++-develUpgrade libMagickWand-7_Q16HDRI6Upgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-docUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-extra | Apr 21, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade libmagickcore-devUpgrade libmagickwand-devUpgrade libmagick++-6.q16-8Upgrade libmagick++-6.q16-devUpgrade imagemagick-6.q16hdriUpgrade libmagickcore-6-arch-configUpgrade imagemagickUpgrade libmagickcore-6.q16-6-extraUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade imagemagick-6-commonUpgrade imagemagick-commonUpgrade libmagickwand-6.q16-devUpgrade libmagick++-6.q16hdri-devUpgrade libimage-magick-q16-perlUpgrade perlmagickUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-devUpgrade libmagick++-devUpgrade libmagick++-6.q16-7Upgrade libimage-magick-perlUpgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16hdri-8Upgrade libmagickcore-6-headersUpgrade libmagickcore-6.q16hdri-6 | Nov 30, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub