| Package | Affected versions | Patched versions |
|---|---|---|
| Magick.NET-Q16-AnyCPU | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-AnyCPU | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-OpenMP-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-x64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-HDRI-x86 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-OpenMP-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-OpenMP-x64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-x64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q16-x86 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-AnyCPU | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-OpenMP-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-OpenMP-x64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-arm64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-x64 | < 14.12.0 | 14.12.0 |
| Magick.NET-Q8-x86 | < 14.12.0 | 14.12.0 |
| imagemagick | ≥ 7.0.0-0, < 7.1.2-23< 6.9.13-48 | 7.1.2-236.9.13-48 |
An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free