CVE-2019-14981
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14981- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-369
- Updated
- 2026-11-02
CVE List No score
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14981- Updated
- 2026-11-02
EUVDEUVD-2019-6071 No score
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
EUVD-2019-6071- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h4mm-v6xr-cx87 No score
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
GHSA-h4mm-v6xr-cx87- Updated
- 2026-11-02
OSVALPINE-CVE-2019-14981
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
ALPINE-CVE-2019-14981- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
CVE-2019-14981- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2019-14981
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
DEBIAN-CVE-2019-14981- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-831
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
JLSEC-2026-831- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVRHSA-2020:1180
8.8
Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update
- Record
RHSA-2020:1180- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-14981
6.5
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Record
UBUNTU-CVE-2019-14981- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2515-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2515-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2519-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2519-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2896-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
- Record
SUSE-SU-2019:2896-1- Updated
- 2026-11-02
OSVUSN-4192-1 No score
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Record
USN-4192-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickAlpine:v3.11 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.12 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.13 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.14 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.15 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.16 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.17 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.18 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.19 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.20 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
Show 111 moreShow less
| Package | Affected | Fixed |
|---|---|---|
imagemagickAlpine:v3.21 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.22 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.23 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagickAlpine:v3.24 |
6.0 up to 7.0.8.56-r0 | 7.0.8.56-r0 |
imagemagick6Alpine:v3.11 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.12 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.13 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.14 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.15 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagick6Alpine:v3.16 |
before 6.9.10.43-r0 | 6.9.10.43-r0 |
imagemagickDebian:12 |
before 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
imagemagickDebian:13 |
before 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
imagemagickDebian:14 |
before 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
imagemagickDebian:8 |
before 8:6.8.9.9-5+deb8u18, plus listed versions 8:6.8.9.9-58:6.8.9.9-5+deb8u18:6.8.9.9-5+deb8u108:6.8.9.9-5+deb8u118:6.8.9.9-5+deb8u12 Show 13 moreShow less8:6.8.9.9-5+deb8u138:6.8.9.9-5+deb8u148:6.8.9.9-5+deb8u158:6.8.9.9-5+deb8u168:6.8.9.9-5+deb8u178:6.8.9.9-5+deb8u28:6.8.9.9-5+deb8u38:6.8.9.9-5+deb8u48:6.8.9.9-5+deb8u58:6.8.9.9-5+deb8u68:6.8.9.9-5+deb8u78:6.8.9.9-5+deb8u88:6.8.9.9-5+deb8u9 |
8:6.8.9.9-5+deb8u18 |
imagemagickDebian:9 |
before 8:6.9.7.4+dfsg-11+deb9u9, plus listed versions 8:6.9.7.4+dfsg-118:6.9.7.4+dfsg-11+deb9u18:6.9.7.4+dfsg-11+deb9u28:6.9.7.4+dfsg-11+deb9u38:6.9.7.4+dfsg-11+deb9u4 Show 4 moreShow less8:6.9.7.4+dfsg-11+deb9u58:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u78:6.9.7.4+dfsg-11+deb9u8 |
8:6.9.7.4+dfsg-11+deb9u9 |
imagemagickDebian:10 |
before 8:6.9.10.23+dfsg-2.1+deb10u1, plus listed versions 8:6.9.10.23+dfsg-2.1 |
8:6.9.10.23+dfsg-2.1+deb10u1 |
ImageMagick_jllJulia |
before 6.9.12+0 | 6.9.12+0 |
ImageMagickRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::client |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::client |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::client |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::client |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
emacsRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
ImageMagickRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::computenode |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::computenode |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-commonRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-elRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::computenode |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-docsRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::computenode |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::server |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::server |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::server |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::server |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-c++Red Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-perlRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
emacsRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-commonRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-filesystemRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-noxRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscapeRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagick-c++-develRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-develRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
ImageMagick-docRed Hat:enterprise_linux:7::workstation |
before 0:6.9.10.68-3.el7 | 0:6.9.10.68-3.el7 |
autotraceRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
autotrace-develRed Hat:enterprise_linux:7::workstation |
before 0:0.31.1-38.el7 | 0:0.31.1-38.el7 |
emacs-elRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
emacs-terminalRed Hat:enterprise_linux:7::workstation |
before 1:24.3-23.el7 | 1:24.3-23.el7 |
inkscape-docsRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
inkscape-viewRed Hat:enterprise_linux:7::workstation |
before 0:0.92.2-3.el7 | 0:0.92.2-3.el7 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 SP1 |
before 7.0.7.34-3.72.1 | 7.0.7.34-3.72.1 |
imagemagickUbuntu:Pro:14.04:LTS |
before 8:6.7.7.10-6ubuntu3.13+esm21, plus listed versions 8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3 Show 32 moreShow less8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm20 |
8:6.7.7.10-6ubuntu3.13+esm21 |
imagemagickUbuntu:16.04:LTS |
before 8:6.8.9.9-7ubuntu5.15, plus listed versions 8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1 Show 17 moreShow less8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.14 |
8:6.8.9.9-7ubuntu5.15 |
imagemagickUbuntu:18.04:LTS |
before 8:6.9.7.4+dfsg-16ubuntu6.8, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 4 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.7 |
8:6.9.7.4+dfsg-16ubuntu6.8 |
imagemagickUbuntu:20.04:LTS |
before 8:6.9.10.23+dfsg-2.1ubuntu9, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu8 |
8:6.9.10.23+dfsg-2.1ubuntu9 |
ImageMagickopenSUSE:Leap 15.1 |
before 7.0.7.34-lp151.7.12.1 | 7.0.7.34-lp151.7.12.1 |
ImageMagickopenSUSE:Leap 15.0 |
before 7.0.7.34-lp150.2.41.1 | 7.0.7.34-lp150.2.41.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14981 is a medium vulnerability (CVSS 6.5) in Imagemagick, published August 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.68%, the 85th percentile. Fixed in imagemagick 7.0.8.56-r0.
References
github.com/ImageMagick/ImageMagick/issues/1552
github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256
github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc
lists.debian.org/debian-lts-announce/2019/10/msg00028.html
usn.ubuntu.com/4192-1
lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
debian.org/security/2020/dsa-4712
lists.debian.org/debian-lts-announce/2020/08/msg00030.html
nvd.nist.gov/vuln/detail/CVE-2019-14981
github.com/advisories/GHSA-h4mm-v6xr-cx87
security.alpinelinux.org/vuln/CVE-2019-14981
security-tracker.debian.org/tracker/CVE-2019-14981
access.redhat.com/errata/RHSA-2020:1180
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1532845
bugzilla.redhat.com/show_bug.cgi?id=1559892
bugzilla.redhat.com/show_bug.cgi?id=1561741
bugzilla.redhat.com/show_bug.cgi?id=1561742
bugzilla.redhat.com/show_bug.cgi?id=1561744
bugzilla.redhat.com/show_bug.cgi?id=1563875
bugzilla.redhat.com/show_bug.cgi?id=1572044
bugzilla.redhat.com/show_bug.cgi?id=1577398
bugzilla.redhat.com/show_bug.cgi?id=1577399
bugzilla.redhat.com/show_bug.cgi?id=1581486
bugzilla.redhat.com/show_bug.cgi?id=1581489
bugzilla.redhat.com/show_bug.cgi?id=1588170
bugzilla.redhat.com/show_bug.cgi?id=1594338
bugzilla.redhat.com/show_bug.cgi?id=1594339
bugzilla.redhat.com/show_bug.cgi?id=1598471
bugzilla.redhat.com/show_bug.cgi?id=1609933
bugzilla.redhat.com/show_bug.cgi?id=1609936
bugzilla.redhat.com/show_bug.cgi?id=1609939
bugzilla.redhat.com/show_bug.cgi?id=1609942
bugzilla.redhat.com/show_bug.cgi?id=1622738
bugzilla.redhat.com/show_bug.cgi?id=1624955
bugzilla.redhat.com/show_bug.cgi?id=1627916
bugzilla.redhat.com/show_bug.cgi?id=1627917
bugzilla.redhat.com/show_bug.cgi?id=1642614
bugzilla.redhat.com/show_bug.cgi?id=1664845
bugzilla.redhat.com/show_bug.cgi?id=1672560
bugzilla.redhat.com/show_bug.cgi?id=1672564
bugzilla.redhat.com/show_bug.cgi?id=1687436
bugzilla.redhat.com/show_bug.cgi?id=1692300
bugzilla.redhat.com/show_bug.cgi?id=1700755
bugzilla.redhat.com/show_bug.cgi?id=1704762
bugzilla.redhat.com/show_bug.cgi?id=1705406
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json
access.redhat.com/security/cve/CVE-2017-11166
cve.org/CVERecord?id=CVE-2017-11166
nvd.nist.gov/vuln/detail/CVE-2017-11166
access.redhat.com/security/cve/CVE-2017-12805
cve.org/CVERecord?id=CVE-2017-12805
nvd.nist.gov/vuln/detail/CVE-2017-12805
access.redhat.com/security/cve/CVE-2017-12806
cve.org/CVERecord?id=CVE-2017-12806
nvd.nist.gov/vuln/detail/CVE-2017-12806
access.redhat.com/security/cve/CVE-2017-18251
cve.org/CVERecord?id=CVE-2017-18251
nvd.nist.gov/vuln/detail/CVE-2017-18251
access.redhat.com/security/cve/CVE-2017-18252
cve.org/CVERecord?id=CVE-2017-18252
nvd.nist.gov/vuln/detail/CVE-2017-18252
access.redhat.com/security/cve/CVE-2017-18254
cve.org/CVERecord?id=CVE-2017-18254
nvd.nist.gov/vuln/detail/CVE-2017-18254
access.redhat.com/security/cve/CVE-2017-18271
cve.org/CVERecord?id=CVE-2017-18271
nvd.nist.gov/vuln/detail/CVE-2017-18271
access.redhat.com/security/cve/CVE-2017-18273
cve.org/CVERecord?id=CVE-2017-18273
nvd.nist.gov/vuln/detail/CVE-2017-18273
access.redhat.com/security/cve/CVE-2017-1000476
cve.org/CVERecord?id=CVE-2017-1000476
nvd.nist.gov/vuln/detail/CVE-2017-1000476
access.redhat.com/security/cve/CVE-2018-8804
cve.org/CVERecord?id=CVE-2018-8804
nvd.nist.gov/vuln/detail/CVE-2018-8804
access.redhat.com/security/cve/CVE-2018-9133
cve.org/CVERecord?id=CVE-2018-9133
nvd.nist.gov/vuln/detail/CVE-2018-9133
access.redhat.com/security/cve/CVE-2018-10177
cve.org/CVERecord?id=CVE-2018-10177
nvd.nist.gov/vuln/detail/CVE-2018-10177
access.redhat.com/security/cve/CVE-2018-10804
cve.org/CVERecord?id=CVE-2018-10804
nvd.nist.gov/vuln/detail/CVE-2018-10804
access.redhat.com/security/cve/CVE-2018-10805
cve.org/CVERecord?id=CVE-2018-10805
nvd.nist.gov/vuln/detail/CVE-2018-10805
access.redhat.com/security/cve/CVE-2018-11656
cve.org/CVERecord?id=CVE-2018-11656
nvd.nist.gov/vuln/detail/CVE-2018-11656
access.redhat.com/security/cve/CVE-2018-12599
cve.org/CVERecord?id=CVE-2018-12599
nvd.nist.gov/vuln/detail/CVE-2018-12599
access.redhat.com/security/cve/CVE-2018-12600
cve.org/CVERecord?id=CVE-2018-12600
nvd.nist.gov/vuln/detail/CVE-2018-12600
access.redhat.com/security/cve/CVE-2018-13153
cve.org/CVERecord?id=CVE-2018-13153
nvd.nist.gov/vuln/detail/CVE-2018-13153
access.redhat.com/security/cve/CVE-2018-14434
cve.org/CVERecord?id=CVE-2018-14434
nvd.nist.gov/vuln/detail/CVE-2018-14434
access.redhat.com/security/cve/CVE-2018-14435
cve.org/CVERecord?id=CVE-2018-14435
nvd.nist.gov/vuln/detail/CVE-2018-14435
access.redhat.com/security/cve/CVE-2018-14436
cve.org/CVERecord?id=CVE-2018-14436
nvd.nist.gov/vuln/detail/CVE-2018-14436
access.redhat.com/security/cve/CVE-2018-14437
cve.org/CVERecord?id=CVE-2018-14437
nvd.nist.gov/vuln/detail/CVE-2018-14437
access.redhat.com/security/cve/CVE-2018-15607
cve.org/CVERecord?id=CVE-2018-15607
nvd.nist.gov/vuln/detail/CVE-2018-15607
access.redhat.com/security/cve/CVE-2018-16328
cve.org/CVERecord?id=CVE-2018-16328
nvd.nist.gov/vuln/detail/CVE-2018-16328
access.redhat.com/security/cve/CVE-2018-16640
cve.org/CVERecord?id=CVE-2018-16640
nvd.nist.gov/vuln/detail/CVE-2018-16640
access.redhat.com/security/cve/CVE-2018-16642
cve.org/CVERecord?id=CVE-2018-16642
nvd.nist.gov/vuln/detail/CVE-2018-16642
access.redhat.com/security/cve/CVE-2018-16643
cve.org/CVERecord?id=CVE-2018-16643
nvd.nist.gov/vuln/detail/CVE-2018-16643
access.redhat.com/security/cve/CVE-2018-16644
cve.org/CVERecord?id=CVE-2018-16644
nvd.nist.gov/vuln/detail/CVE-2018-16644
access.redhat.com/security/cve/CVE-2018-16645
cve.org/CVERecord?id=CVE-2018-16645
nvd.nist.gov/vuln/detail/CVE-2018-16645
access.redhat.com/security/cve/CVE-2018-16749
cve.org/CVERecord?id=CVE-2018-16749
nvd.nist.gov/vuln/detail/CVE-2018-16749
cve.org/CVERecord?id=CVE-2018-16750
nvd.nist.gov/vuln/detail/CVE-2018-16750
cve.org/CVERecord?id=CVE-2018-17966
nvd.nist.gov/vuln/detail/CVE-2018-17966
suse.com/support/update/announcement/2019/suse-su-20192896-1
bugzilla.suse.com/1146065
bugzilla.suse.com/1146068
bugzilla.suse.com/1146211
bugzilla.suse.com/1146212
bugzilla.suse.com/1146213
bugzilla.suse.com/1151781
bugzilla.suse.com/1151782
bugzilla.suse.com/1151783
bugzilla.suse.com/1151784
bugzilla.suse.com/1151785
bugzilla.suse.com/1151786
suse.com/security/cve/CVE-2019-14980
suse.com/security/cve/CVE-2019-14981
suse.com/security/cve/CVE-2019-15139
suse.com/security/cve/CVE-2019-15140
suse.com/security/cve/CVE-2019-15141
suse.com/security/cve/CVE-2019-16708
suse.com/security/cve/CVE-2019-16709
suse.com/security/cve/CVE-2019-16710
suse.com/security/cve/CVE-2019-16711
suse.com/security/cve/CVE-2019-16712
suse.com/security/cve/CVE-2019-16713
ubuntu.com/security/CVE-2019-14981
ubuntu.com/security/notices/USN-4192-1
ubuntu.com/security/notices/USN-8263-1
ubuntu.com/security/CVE-2019-12974
ubuntu.com/security/CVE-2019-12975
ubuntu.com/security/CVE-2019-12976
ubuntu.com/security/CVE-2019-12977
ubuntu.com/security/CVE-2019-12978
ubuntu.com/security/CVE-2019-12979
ubuntu.com/security/CVE-2019-13135
ubuntu.com/security/CVE-2019-13137
ubuntu.com/security/CVE-2019-13295
ubuntu.com/security/CVE-2019-13297
ubuntu.com/security/CVE-2019-13300
ubuntu.com/security/CVE-2019-13301
ubuntu.com/security/CVE-2019-13304
ubuntu.com/security/CVE-2019-13305
ubuntu.com/security/CVE-2019-13306
ubuntu.com/security/CVE-2019-13307
ubuntu.com/security/CVE-2019-13308
ubuntu.com/security/CVE-2019-13309
ubuntu.com/security/CVE-2019-13310
ubuntu.com/security/CVE-2019-13311
ubuntu.com/security/CVE-2019-13391
ubuntu.com/security/CVE-2019-13454
ubuntu.com/security/CVE-2019-15139
ubuntu.com/security/CVE-2019-15140
ubuntu.com/security/CVE-2019-16708
ubuntu.com/security/CVE-2019-16709
ubuntu.com/security/CVE-2019-16710
ubuntu.com/security/CVE-2019-16711
ubuntu.com/security/CVE-2019-16713
lists.opensuse.org/archives/list/[email protected]/thread/HKLSLL4IX54TYZVRJUYXN4DW53SHUXMP
lists.opensuse.org/archives/list/[email protected]/thread/GGD5GT3XH47ZWIXPD27DWBTDQARZCQQU
Left out here: 206 references. The JSON record has them.