| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 7.0.7-23≥ 7.0.7-16, < 7.0.7-21 | 7.0.7-21 |
In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free