CVE-2017-11446

Опубликовано: 19 июл. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 7.1

EPSS Низкий

Описание

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

Ссылки

http://www.securityfocus.com/bid/99964
https://github.com/ImageMagick/ImageMagick/issues/537
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
https://www.debian.org/security/2017/dsa-4019
http://www.securityfocus.com/bid/99964
https://github.com/ImageMagick/ImageMagick/issues/537
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
https://www.debian.org/security/2017/dsa-4019

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00416

Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2017-11446

CVSS3: 6.5

ubuntu

больше 8 лет назад

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

CVE-2017-11446

CVSS3: 3.3

redhat

больше 8 лет назад

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

CVE-2017-11446

CVSS3: 6.5

debian

больше 8 лет назад

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has a ...

GHSA-mxwm-w839-25wj

CVSS3: 6.5

github

больше 3 лет назад

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

BDU:2017-01715

fstec

больше 8 лет назад

Уязвимость функции ReadPESImage консольного графического редактора ImageMagick, позволяющая нарушителю видоизменить цикл на бесконечный

EPSS

Процентиль: 61%

0.00416

Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835