CVE-2022-3213

Опубликовано: 19 сент. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

Ссылки

https://access.redhat.com/security/cve/CVE-2022-3213
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2126824
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95be854fe84e6c2a2
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e41fe7cb70030e8750
Patch
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-3213
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2126824
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95be854fe84e6c2a2
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e41fe7cb70030e8750
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия до 6.9.12-62 (исключая)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 7.1.0-0 (включая) до 7.1.0-47 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.0003

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787

Связанные уязвимости

CVE-2022-3213

CVSS3: 5.5

ubuntu

больше 3 лет назад

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

CVE-2022-3213

CVSS3: 5.5

redhat

больше 3 лет назад

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

CVE-2022-3213

CVSS3: 5.5

debian

больше 3 лет назад

A heap buffer overflow issue was found in ImageMagick. When an applica ...

SUSE-SU-2022:3487-1

suse-cvrf

больше 3 лет назад

Security update for ImageMagick

GHSA-rvv6-3f7f-jg4m

CVSS3: 5.5

github

больше 3 лет назад

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

EPSS

Процентиль: 8%

0.0003

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787