CVE-2017-11188

Опубликовано: 12 июл. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

Ссылки

http://www.securityfocus.com/bid/99566
https://github.com/ImageMagick/ImageMagick/issues/509
Issue Tracking
Patch
Third Party Advisory
http://www.securityfocus.com/bid/99566
https://github.com/ImageMagick/ImageMagick/issues/509
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:7.0.6-0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.01552

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-834

Связанные уязвимости

CVE-2017-11188

CVSS3: 7.5

ubuntu

около 9 лет назад

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

CVE-2017-11188

CVSS3: 3.3

redhat

около 9 лет назад

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

CVE-2017-11188

CVSS3: 7.5

debian

около 9 лет назад

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a ...

GHSA-5vhr-wx7h-g7c7

CVSS3: 7.5

github

больше 4 лет назад

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

BDU:2017-01677

fstec

около 9 лет назад

Уязвимость функции ReadDPXImage консольного графического редактора ImageMagick, позволяющая нарушителю вызвать истощение ресурсов центрального процессора

EPSS

Процентиль: 73%

0.01552

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-834