Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-6799

Опубликовано: 07 фев. 2018
Источник: debian
EPSS Низкий

Описание

The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
graphicsmagickfixed1.3.28-1package

Примечания

  • https://sourceforge.net/p/graphicsmagick/bugs/531/

  • https://sourceforge.net/p/graphicsmagick/bugs/532/

  • http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/b41e2efce6d3

  • http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/d30ed06e9b87

EPSS

Процентиль: 73%
0.00781
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 8 лет назад

The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.

CVSS3: 8.8
nvd
около 8 лет назад

The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.

CVSS3: 8.8
github
больше 3 лет назад

The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.

suse-cvrf
почти 8 лет назад

Security update for GraphicsMagick

EPSS

Процентиль: 73%
0.00781
Низкий