A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++ | Mar 7, 2023 | Aug 26, 2022 |
| Amazon_linux | — | Upgrade ImageMagick | Mar 7, 2023 | Aug 26, 2022 |
| Debian | — | Upgrade imagemagick | Mar 13, 2023 | Aug 26, 2022 |
| Suse | — | Upgrade libmagick-7_q16hdri4Upgrade libmagick-7_q16hdri4-32bitUpgrade imagemagick-develUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-devel-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-7-upstreamUpgrade libmagick-develUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagickUpgrade libmagick-devel-32bitUpgrade imagemagick-docUpgrade imagemagick-extraUpgrade libmagickcore-7_q16hdri6Upgrade imagemagick-config-7-suseUpgrade libmagickwand-7_q16hdri6-32bit | Oct 26, 2022 | Aug 26, 2022 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-devUpgrade libmagick++-devUpgrade libmagickcore-6-arch-configUpgrade libmagickcore-6-headersUpgrade libmagick++-6.q16hdri-8Upgrade perlmagickUpgrade libmagickcore-devUpgrade libmagickwand-devUpgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6.q16-6Upgrade libimage-magick-q16-perlUpgrade libmagickwand-6.q16-devUpgrade imagemagick-6-commonUpgrade libmagick++-6.q16-devUpgrade imagemagick-commonUpgrade libimage-magick-perlUpgrade imagemagick-6.q16Upgrade imagemagick-6.q16hdriUpgrade libmagick++-6.q16-8Upgrade libmagickwand-6.q16-6Upgrade imagemagick | Nov 24, 2022 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub