Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-10069

Fixed in a distro release EPSS 2%

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.

Published 2017-03-02 · CVE record · OSV

Products: imagemagick, opensuse_project leap

Distro releases

ReleasePackageFixed in
Debian 12imagemagick8:6.9.6.2+dfsg-2
Debian 13imagemagick8:6.9.6.2+dfsg-2
Debian 14imagemagick8:6.9.6.2+dfsg-2
Debian 7imagemagick8:6.7.7.10-5+deb7u10
Debian 8imagemagick8:6.8.9.9-5+deb8u6
SUSE Linux Enterprise Desktop 12 SP1ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Desktop 12 SP2ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Server 12 SP1ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Server 12 SP2ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Software Development Kit 12 SP1ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Software Development Kit 12 SP2ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Workstation Extension 12 SP1ImageMagick6.8.8.1-59.1
SUSE Linux Enterprise Workstation Extension 12 SP2ImageMagick6.8.8.1-59.1
Ubuntu 14.04 LTSimagemagick8:6.7.7.10-6ubuntu3.3
Ubuntu 16.04 LTSimagemagick8:6.8.9.9-7ubuntu5.3