CVE-2017-14138

Опубликовано: 04 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

Ссылки

https://github.com/ImageMagick/ImageMagick/issues/639
Exploit
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201711-07
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/639
Exploit
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201711-07
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00316

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2017-14138

CVSS3: 9.8

ubuntu

больше 8 лет назад

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

CVE-2017-14138

CVSS3: 3.3

redhat

больше 8 лет назад

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

CVE-2017-14138

CVSS3: 9.8

debian

больше 8 лет назад

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage i ...

GHSA-m6v7-949f-98pp

CVSS3: 9.8

github

больше 3 лет назад

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

BDU:2017-02087

fstec

больше 8 лет назад

Уязвимость функции ReadWEBPImage (coders/webp.c) консольного графического редактора ImageMagick, позволяющая нарушителю вызвать утечку памяти

EPSS

Процентиль: 54%

0.00316

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-772