CVE-2022-2719
Fixed in a distro release EPSS <1%CVSS 5.5
In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30.
Products: fedoraproject extra_packages_for_enterprise_linux, imagemagick, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | imagemagick-6 | 0 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | ImageMagick | 7.0.7.34-150000.3.123.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | ImageMagick | 7.0.7.34-150200.10.36.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | ImageMagick | 7.1.0.9-150400.6.6.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | ImageMagick | 7.0.7.34-150200.10.36.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | ImageMagick | 7.1.0.9-150400.6.6.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | ImageMagick | 7.0.7.34-150000.3.123.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | ImageMagick | 7.0.7.34-150000.3.123.1 |
| openSUSE Leap 15.3 | ImageMagick | 7.0.7.34-150200.10.36.1 |
| openSUSE Leap 15.4 | ImageMagick | 7.1.0.9-150400.6.6.1 |
| openSUSE Leap 15.4 | ImageMagick | 7.0.7.34-150200.10.36.1 |
| openSUSE Tumbleweed | ImageMagick | 7.1.1.17-1.1 |