CVE-2019-17540

Опубликовано: 14 окт. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

Ссылки

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15826
Issue Tracking
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942578
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/compare/7.0.8-53...7.0.8-54
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/compare/master%40%7B2019-07-15%7D...master%40%7B2019-07-17%7D
https://security-tracker.debian.org/tracker/CVE-2019-17540
Patch
Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15826
Issue Tracking
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942578
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/compare/7.0.8-53...7.0.8-54
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/compare/master%40%7B2019-07-15%7D...master%40%7B2019-07-17%7D
https://security-tracker.debian.org/tracker/CVE-2019-17540
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 6.9.10-54 (включая) до 6.9.10-55 (исключая)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 7.0.0-0 (включая) до 7.0.8-54 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00462

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-17540

CVSS3: 8.8

ubuntu

почти 6 лет назад

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

CVE-2019-17540

CVSS3: 8.8

redhat

около 6 лет назад

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

CVE-2019-17540

CVSS3: 8.8

debian

почти 6 лет назад

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPS ...

GHSA-2qcx-339j-m3wx

github

около 3 лет назад

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

SUSE-SU-2022:2263-1

suse-cvrf

около 3 лет назад

Security update for ImageMagick

EPSS

Процентиль: 63%

0.00462

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787