CVE-2017-18210

Опубликовано: 01 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.

Ссылки

http://www.securityfocus.com/bid/103212
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/issues/791
Patch
Third Party Advisory
http://www.securityfocus.com/bid/103212
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/issues/791
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:7.0.7-0:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-1:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-3:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-5:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-6:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-8:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-9:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-10:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-11:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-12:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-13:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-14:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-15:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-16:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-17:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-18:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-19:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-20:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-21:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-22:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-23:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-24:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7-25:*:*:*:*:*:*:*

cpe:2.3:a:imagemagick:imagemagick:7.0.7.7:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00319

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2017-18210

CVSS3: 9.8

ubuntu

почти 8 лет назад

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.

CVE-2017-18210

CVSS3: 3.3

redhat

больше 8 лет назад

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.

CVE-2017-18210

CVSS3: 9.8

debian

почти 8 лет назад

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was fou ...

GHSA-gfr8-9q9h-8fjw

CVSS3: 9.8

github

больше 3 лет назад

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.

EPSS

Процентиль: 54%

0.00319

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-476