| Package | Affected versions | Patched versions |
|---|---|---|
| extra packages for enterprise linux | = 8.0 | |
| imagemagick | = 7.1.1-4< 6.9.12-84 | 6.9.12-84 |
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free