CVE-2016-7513

Опубликовано: 20 апр. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.

Ссылки

http://www.openwall.com/lists/oss-security/2016/09/22/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93121
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832455
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1378733
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/a54fe0e8600eaf3dc6fe717d3c0398001507f723
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/09/22/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93121
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832455
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1378733
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/a54fe0e8600eaf3dc6fe717d3c0398001507f723
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия до 6.9.4-0 (исключая)

EPSS

Процентиль: 69%

0.00613

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2016-7513

CVSS3: 6.5

ubuntu

почти 9 лет назад

Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.

CVE-2016-7513

CVSS3: 3.3

redhat

около 11 лет назад

Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.

CVE-2016-7513

CVSS3: 6.5

debian

почти 9 лет назад

Off-by-one error in magick/cache.c in ImageMagick allows remote attack ...

GHSA-6fpf-rm62-frrc

CVSS3: 6.5

github

больше 3 лет назад

Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.

openSUSE-SU-2016:2770-1

suse-cvrf

около 9 лет назад

Security update for ImageMagick

EPSS

Процентиль: 69%

0.00613

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-189