CVE-2017-6502

Опубликовано: 06 мар. 2017

Источник: debian

EPSS Низкий

Описание

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

Пакет	Статус	Версия исправления	Релиз	Тип
imagemagick	fixed	8:6.9.9.34+dfsg-3		package

webp is disable under Debian, cf. https://bugs.debian.org/856883#14
https://github.com/ImageMagick/ImageMagick/commit/126c7c98ea788241922c30df4a5633ea692cf8df

EPSS

Процентиль: 36%

0.00151

Низкий

CVE-2017-6502

CVSS3: 5.5

ubuntu

почти 9 лет назад

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

CVE-2017-6502

CVSS3: 3.3

redhat

почти 9 лет назад

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

CVE-2017-6502

CVSS3: 5.5

nvd

почти 9 лет назад

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

GHSA-7mrh-63q8-89f3

CVSS3: 5.5

github

больше 3 лет назад

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

openSUSE-SU-2017:1560-1

suse-cvrf

больше 8 лет назад

Security update for ImageMagick

EPSS

Процентиль: 36%

0.00151

Низкий