CVE-2019-14980
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free...
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14980- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14980- Updated
- 2026-11-02
EUVDEUVD-2019-6070 No score
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
EUVD-2019-6070- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-85q2-94hx-c24v
6.5
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free...
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
GHSA-85q2-94hx-c24v- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-14980
6.5
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
ALPINE-CVE-2019-14980- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
6.5
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14980- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVJLSEC-2026-830
6.5
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
- Record
JLSEC-2026-830- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVRHSA-2020:1180
8.8
Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update
- Record
RHSA-2020:1180- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2515-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2515-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2519-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2519-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2785-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. (bsc#1146213)
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. (bsc#1146212)
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function. (bsc#1146211)
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage. (bsc#1146068)
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
- Record
SUSE-SU-2019:2785-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2785-2 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. (bsc#1146213)
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. (bsc#1146212)
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function. (bsc#1146211)
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage. (bsc#1146068)
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
- Record
SUSE-SU-2019:2785-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:2896-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
- Record
SUSE-SU-2019:2896-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickAlpine:v3.11 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.12 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.13 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.14 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.15 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.16 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.17 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.18 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.19 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.20 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
Show 110 moreShow less
| Package | Affected | Fixed |
|---|---|---|
imagemagickAlpine:v3.21 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.22 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.23 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagickAlpine:v3.24 |
6.0 up to 7.0.8.44-r0 | 7.0.8.44-r0 |
imagemagick6Alpine:v3.11 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.12 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.13 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.14 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.15 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.16 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
ImageMagick_jllJulia |
before 6.9.12+0 | 6.9.12+0 |
ImageMagickRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
emacsRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
ImageMagickRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-commonRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-elRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-docsRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickSUSE:Linux Enterprise Desktop 12 SP4 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Server 12 SP4 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Workstation Extension 12 SP4 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Server 12 SP5 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 6.8.8.1-71.131.1 | 6.8.8.1-71.131.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 SP1 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickopenSUSE:Leap 15.1 |
before 7.0.7.34-lp151.7.12.1 | 7.0.7.34-lp151.7.12.1 |
ImageMagickopenSUSE:Leap 15.0 |
before 7.0.7.34-lp150.2.41.1 | 7.0.7.34-lp150.2.41.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14980 is a medium vulnerability (CVSS 6.5) in Imagemagick, published August 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. Fixed in imagemagick 7.0.8.44-r0.
References
github.com/ImageMagick/ImageMagick6/issues/43
github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830
github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba
github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42
lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html
lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-14980
github.com/advisories/GHSA-85q2-94hx-c24v
security.alpinelinux.org/vuln/CVE-2019-14980
access.redhat.com/errata/RHSA-2020:1180
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1532845
bugzilla.redhat.com/show_bug.cgi?id=1559892
bugzilla.redhat.com/show_bug.cgi?id=1561741
bugzilla.redhat.com/show_bug.cgi?id=1561742
bugzilla.redhat.com/show_bug.cgi?id=1561744
bugzilla.redhat.com/show_bug.cgi?id=1563875
bugzilla.redhat.com/show_bug.cgi?id=1572044
bugzilla.redhat.com/show_bug.cgi?id=1577398
bugzilla.redhat.com/show_bug.cgi?id=1577399
bugzilla.redhat.com/show_bug.cgi?id=1581486
bugzilla.redhat.com/show_bug.cgi?id=1581489
bugzilla.redhat.com/show_bug.cgi?id=1588170
bugzilla.redhat.com/show_bug.cgi?id=1594338
bugzilla.redhat.com/show_bug.cgi?id=1594339
bugzilla.redhat.com/show_bug.cgi?id=1598471
bugzilla.redhat.com/show_bug.cgi?id=1609933
bugzilla.redhat.com/show_bug.cgi?id=1609936
bugzilla.redhat.com/show_bug.cgi?id=1609939
bugzilla.redhat.com/show_bug.cgi?id=1609942
bugzilla.redhat.com/show_bug.cgi?id=1622738
bugzilla.redhat.com/show_bug.cgi?id=1624955
bugzilla.redhat.com/show_bug.cgi?id=1627916
bugzilla.redhat.com/show_bug.cgi?id=1627917
bugzilla.redhat.com/show_bug.cgi?id=1642614
bugzilla.redhat.com/show_bug.cgi?id=1664845
bugzilla.redhat.com/show_bug.cgi?id=1672560
bugzilla.redhat.com/show_bug.cgi?id=1672564
bugzilla.redhat.com/show_bug.cgi?id=1687436
bugzilla.redhat.com/show_bug.cgi?id=1692300
bugzilla.redhat.com/show_bug.cgi?id=1700755
bugzilla.redhat.com/show_bug.cgi?id=1704762
bugzilla.redhat.com/show_bug.cgi?id=1705406
bugzilla.redhat.com/show_bug.cgi?id=1705414
bugzilla.redhat.com/show_bug.cgi?id=1707768
bugzilla.redhat.com/show_bug.cgi?id=1707770
bugzilla.redhat.com/show_bug.cgi?id=1708517
bugzilla.redhat.com/show_bug.cgi?id=1708521
bugzilla.redhat.com/show_bug.cgi?id=1726078
bugzilla.redhat.com/show_bug.cgi?id=1726081
bugzilla.redhat.com/show_bug.cgi?id=1726104
bugzilla.redhat.com/show_bug.cgi?id=1728474
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json
access.redhat.com/security/cve/CVE-2017-11166
cve.org/CVERecord?id=CVE-2017-11166
nvd.nist.gov/vuln/detail/CVE-2017-11166
access.redhat.com/security/cve/CVE-2017-12805
cve.org/CVERecord?id=CVE-2017-12805
nvd.nist.gov/vuln/detail/CVE-2017-12805
access.redhat.com/security/cve/CVE-2017-12806
cve.org/CVERecord?id=CVE-2017-12806
nvd.nist.gov/vuln/detail/CVE-2017-12806
access.redhat.com/security/cve/CVE-2017-18251
cve.org/CVERecord?id=CVE-2017-18251
nvd.nist.gov/vuln/detail/CVE-2017-18251
access.redhat.com/security/cve/CVE-2017-18252
cve.org/CVERecord?id=CVE-2017-18252
nvd.nist.gov/vuln/detail/CVE-2017-18252
access.redhat.com/security/cve/CVE-2017-18254
cve.org/CVERecord?id=CVE-2017-18254
nvd.nist.gov/vuln/detail/CVE-2017-18254
access.redhat.com/security/cve/CVE-2017-18271
cve.org/CVERecord?id=CVE-2017-18271
nvd.nist.gov/vuln/detail/CVE-2017-18271
access.redhat.com/security/cve/CVE-2017-18273
cve.org/CVERecord?id=CVE-2017-18273
nvd.nist.gov/vuln/detail/CVE-2017-18273
access.redhat.com/security/cve/CVE-2017-1000476
cve.org/CVERecord?id=CVE-2017-1000476
nvd.nist.gov/vuln/detail/CVE-2017-1000476
access.redhat.com/security/cve/CVE-2018-8804
cve.org/CVERecord?id=CVE-2018-8804
nvd.nist.gov/vuln/detail/CVE-2018-8804
access.redhat.com/security/cve/CVE-2018-9133
cve.org/CVERecord?id=CVE-2018-9133
nvd.nist.gov/vuln/detail/CVE-2018-9133
access.redhat.com/security/cve/CVE-2018-10177
cve.org/CVERecord?id=CVE-2018-10177
nvd.nist.gov/vuln/detail/CVE-2018-10177
access.redhat.com/security/cve/CVE-2018-10804
cve.org/CVERecord?id=CVE-2018-10804
nvd.nist.gov/vuln/detail/CVE-2018-10804
access.redhat.com/security/cve/CVE-2018-10805
cve.org/CVERecord?id=CVE-2018-10805
nvd.nist.gov/vuln/detail/CVE-2018-10805
access.redhat.com/security/cve/CVE-2018-11656
cve.org/CVERecord?id=CVE-2018-11656
nvd.nist.gov/vuln/detail/CVE-2018-11656
access.redhat.com/security/cve/CVE-2018-12599
cve.org/CVERecord?id=CVE-2018-12599
nvd.nist.gov/vuln/detail/CVE-2018-12599
access.redhat.com/security/cve/CVE-2018-12600
cve.org/CVERecord?id=CVE-2018-12600
nvd.nist.gov/vuln/detail/CVE-2018-12600
access.redhat.com/security/cve/CVE-2018-13153
cve.org/CVERecord?id=CVE-2018-13153
nvd.nist.gov/vuln/detail/CVE-2018-13153
access.redhat.com/security/cve/CVE-2018-14434
cve.org/CVERecord?id=CVE-2018-14434
nvd.nist.gov/vuln/detail/CVE-2018-14434
access.redhat.com/security/cve/CVE-2018-14435
cve.org/CVERecord?id=CVE-2018-14435
nvd.nist.gov/vuln/detail/CVE-2018-14435
access.redhat.com/security/cve/CVE-2018-14436
cve.org/CVERecord?id=CVE-2018-14436
nvd.nist.gov/vuln/detail/CVE-2018-14436
access.redhat.com/security/cve/CVE-2018-14437
cve.org/CVERecord?id=CVE-2018-14437
nvd.nist.gov/vuln/detail/CVE-2018-14437
access.redhat.com/security/cve/CVE-2018-15607
cve.org/CVERecord?id=CVE-2018-15607
nvd.nist.gov/vuln/detail/CVE-2018-15607
access.redhat.com/security/cve/CVE-2018-16328
cve.org/CVERecord?id=CVE-2018-16328
nvd.nist.gov/vuln/detail/CVE-2018-16328
access.redhat.com/security/cve/CVE-2018-16640
cve.org/CVERecord?id=CVE-2018-16640
nvd.nist.gov/vuln/detail/CVE-2018-16640
access.redhat.com/security/cve/CVE-2018-16642
cve.org/CVERecord?id=CVE-2018-16642
nvd.nist.gov/vuln/detail/CVE-2018-16642
access.redhat.com/security/cve/CVE-2018-16643
cve.org/CVERecord?id=CVE-2018-16643
nvd.nist.gov/vuln/detail/CVE-2018-16643
access.redhat.com/security/cve/CVE-2018-16644
cve.org/CVERecord?id=CVE-2018-16644
nvd.nist.gov/vuln/detail/CVE-2018-16644
access.redhat.com/security/cve/CVE-2018-16645
cve.org/CVERecord?id=CVE-2018-16645
nvd.nist.gov/vuln/detail/CVE-2018-16645
access.redhat.com/security/cve/CVE-2018-16749
cve.org/CVERecord?id=CVE-2018-16749
nvd.nist.gov/vuln/detail/CVE-2018-16749
access.redhat.com/security/cve/CVE-2018-16750
cve.org/CVERecord?id=CVE-2018-16750
nvd.nist.gov/vuln/detail/CVE-2018-16750
access.redhat.com/security/cve/CVE-2018-17966
cve.org/CVERecord?id=CVE-2018-17966
nvd.nist.gov/vuln/detail/CVE-2018-17966
access.redhat.com/security/cve/CVE-2018-17967
cve.org/CVERecord?id=CVE-2018-17967
nvd.nist.gov/vuln/detail/CVE-2018-17967
access.redhat.com/security/cve/CVE-2018-18016
cve.org/CVERecord?id=CVE-2018-18016
nvd.nist.gov/vuln/detail/CVE-2018-18016
access.redhat.com/security/cve/CVE-2018-18024
cve.org/CVERecord?id=CVE-2018-18024
nvd.nist.gov/vuln/detail/CVE-2018-18024
access.redhat.com/security/cve/CVE-2018-18544
cve.org/CVERecord?id=CVE-2018-18544
nvd.nist.gov/vuln/detail/CVE-2018-18544
access.redhat.com/security/cve/CVE-2018-20467
cve.org/CVERecord?id=CVE-2018-20467
nvd.nist.gov/vuln/detail/CVE-2018-20467
access.redhat.com/security/cve/CVE-2019-7175
cve.org/CVERecord?id=CVE-2019-7175
nvd.nist.gov/vuln/detail/CVE-2019-7175
cve.org/CVERecord?id=CVE-2019-7397
nvd.nist.gov/vuln/detail/CVE-2019-7397
cve.org/CVERecord?id=CVE-2019-7398
nvd.nist.gov/vuln/detail/CVE-2019-7398
cve.org/CVERecord?id=CVE-2019-9956
suse.com/support/update/announcement/2019/suse-su-20192785-1
bugzilla.suse.com/1146068
bugzilla.suse.com/1146211
bugzilla.suse.com/1146212
bugzilla.suse.com/1146213
bugzilla.suse.com/1151781
bugzilla.suse.com/1151782
bugzilla.suse.com/1151783
bugzilla.suse.com/1151784
bugzilla.suse.com/1151785
bugzilla.suse.com/1151786
suse.com/security/cve/CVE-2019-14980
suse.com/security/cve/CVE-2019-15139
suse.com/security/cve/CVE-2019-15140
suse.com/security/cve/CVE-2019-15141
suse.com/security/cve/CVE-2019-16708
suse.com/security/cve/CVE-2019-16709
suse.com/security/cve/CVE-2019-16710
suse.com/security/cve/CVE-2019-16711
suse.com/security/cve/CVE-2019-16712
suse.com/security/cve/CVE-2019-16713
suse.com/support/update/announcement/2019/suse-su-20192785-2
suse.com/support/update/announcement/2019/suse-su-20192896-1
bugzilla.suse.com/1146065
suse.com/security/cve/CVE-2019-14981
lists.opensuse.org/archives/list/[email protected]/thread/HKLSLL4IX54TYZVRJUYXN4DW53SHUXMP
lists.opensuse.org/archives/list/[email protected]/thread/GGD5GT3XH47ZWIXPD27DWBTDQARZCQQU
Left out here: 172 references. The JSON record has them.