CVE-2014-9852

Опубликовано: 17 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/02/13
Mailing List
Patch
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=37ec7d53dcb99fbd1f5c33442594d5e279630563
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1343512
Issue Tracking
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/02/13
Mailing List
Patch
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=37ec7d53dcb99fbd1f5c33442594d5e279630563
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1343512
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия до 6.9.4-0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01316

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-913

Связанные уязвимости

CVE-2014-9852

CVSS3: 9.8

ubuntu

почти 9 лет назад

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

CVE-2014-9852

redhat

около 11 лет назад

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

CVE-2014-9852

CVSS3: 9.8

debian

почти 9 лет назад

distribute-cache.c in ImageMagick re-uses objects after they have been ...

GHSA-6hr3-77qj-w9w9

CVSS3: 9.8

github

больше 3 лет назад

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

openSUSE-SU-2016:1833-1

suse-cvrf

больше 9 лет назад

Security update for ImageMagick

EPSS

Процентиль: 79%

0.01316

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-913