Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-11597

Опубликовано: 27 апр. 2019
Источник: redhat
CVSS3: 8.1

Описание

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ImageMagickWill not fix
Red Hat Enterprise Linux 6ImageMagickWill not fix
Red Hat Enterprise Linux 7autotraceFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7emacsFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7ImageMagickFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7inkscapeFixedRHSA-2020:118031.03.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1705406ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

CVSS3: 8.1
nvd
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

CVSS3: 8.1
debian
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in ...

suse-cvrf
почти 6 лет назад

Security update for ImageMagick

suse-cvrf
около 6 лет назад

Security update for ImageMagick

8.1 High

CVSS3