Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2vwp-58hf-5q8q

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

EPSS

Процентиль: 29%
0.00102
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-834

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

CVSS3: 3.3
redhat
больше 7 лет назад

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

CVSS3: 6.5
nvd
больше 7 лет назад

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

CVSS3: 6.5
debian
больше 7 лет назад

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage ...

CVSS3: 6.5
fstec
больше 7 лет назад

Уязвимость функций DecodeLabImage и EncodeLabImage компонента coders/tiff.c консольного графического редактора ImageMagick, связанная с чрезмерным итерированием, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.00102
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-834