CVE-2015-8900

Опубликовано: 27 фев. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

Ссылки

http://trac.imagemagick.org/changeset/17845
Broken Link
http://trac.imagemagick.org/changeset/17846
Broken Link
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26929
Exploit
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/02/26/13
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/06/2
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1195260
Issue Tracking
Patch
https://github.com/ImageMagick/ImageMagick/commit/97aa7d7cfd2027f6ba7ce42caf8b798541b9cdc6
Issue Tracking
Patch
Third Party Advisory
http://trac.imagemagick.org/changeset/17845
Broken Link
http://trac.imagemagick.org/changeset/17846
Broken Link
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26929
Exploit
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/02/26/13
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/06/2
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1195260
Issue Tracking
Patch
https://github.com/ImageMagick/ImageMagick/commit/97aa7d7cfd2027f6ba7ce42caf8b798541b9cdc6
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.9.3-10 (включая)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 7.0.1-0 (включая) до 7.0.5-0 (включая)

EPSS

Процентиль: 45%

0.00222

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2015-8900

CVSS3: 5.5

ubuntu

почти 9 лет назад

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

CVE-2015-8900

redhat

почти 11 лет назад

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

CVE-2015-8900

CVSS3: 5.5

debian

почти 9 лет назад

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x a ...

GHSA-xjpw-mc8f-p786

CVSS3: 5.5

github

больше 3 лет назад

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

openSUSE-SU-2016:1833-1

suse-cvrf

больше 9 лет назад

Security update for ImageMagick

EPSS

Процентиль: 45%

0.00222

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835