A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-devel | Jul 21, 2023 | Jun 16, 2023 |
| Amazon_linux | — | Upgrade ImageMagick | Jul 20, 2023 | Jun 16, 2023 |
| Debian | — | Upgrade imagemagick | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSE | Jul 19, 2023 | Jun 16, 2023 |
| Ubuntu | — | Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagick++-6.q16-devUpgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade imagemagick-6.q16hdriUpgrade libmagick++-devUpgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade imagemagickUpgrade perlmagick (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-6-commonUpgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade libimage-magick-q16-perlUpgrade imagemagick-6-common (Ubuntu Pro)Upgrade libmagickcore-6-headersUpgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-devUpgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade perlmagickUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade imagemagick-commonUpgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-devUpgrade libmagickcore-6.q16-devUpgrade libimage-magick-perlUpgrade libmagickwand-devUpgrade libmagickwand-6.q16-devUpgrade libmagick++-6.q16hdri-8 | Jul 5, 2023 | Jun 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub