Описание
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
Отчет
Red Hat Product Security has rated this issue as having a security impact of Low, and a future update may address this flaw.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | ImageMagick | Not affected | ||
| Red Hat Enterprise Linux 6 | ImageMagick | Will not fix | ||
| Red Hat Enterprise Linux 8 | ImageMagick | Will not fix | ||
| Red Hat Enterprise Linux 7 | autotrace | Fixed | RHSA-2020:1180 | 31.03.2020 |
| Red Hat Enterprise Linux 7 | emacs | Fixed | RHSA-2020:1180 | 31.03.2020 |
| Red Hat Enterprise Linux 7 | ImageMagick | Fixed | RHSA-2020:1180 | 31.03.2020 |
| Red Hat Enterprise Linux 7 | inkscape | Fixed | RHSA-2020:1180 | 31.03.2020 |
Показывать по
Дополнительная информация
Статус:
EPSS
3.3 Low
CVSS3
Связанные уязвимости
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remot ...
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
Уязвимость функции WriteEPTImage компонента coders/ept.c консольного графического редактора ImageMagick, связанная с повторным освобождением области памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
3.3 Low
CVSS3