ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 23 Π΄Π΅ΠΊ. 2019
ΠΡΡΠΎΡΠ½ΠΈΠΊ: redhat
CVSS3: 7
EPSS ΠΠΈΠ·ΠΊΠΈΠΉ
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
ΠΠ°ΡΡΠΎΠ½ΡΡΡΠ΅ ΠΏΠ°ΠΊΠ΅ΡΡ
| ΠΠ»Π°ΡΡΠΎΡΠΌΠ° | ΠΠ°ΠΊΠ΅Ρ | Π‘ΠΎΡΡΠΎΡΠ½ΠΈΠ΅ | Π Π΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΡ | Π Π΅Π»ΠΈΠ· |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | ImageMagick | Out of support scope | ||
| Red Hat Enterprise Linux 6 | ImageMagick | Out of support scope | ||
| Red Hat Enterprise Linux 7 | ImageMagick | Not affected |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
10
Π‘ΡΡΠ»ΠΊΠΈ Π½Π° ΠΈΡΡΠΎΡΠ½ΠΈΠΊΠΈ
ΠΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½Π°Ρ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΡ
Π‘ΡΠ°ΡΡΡ:
Moderate
ΠΠ΅ΡΠ΅ΠΊΡ:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1792465ImageMagick: use-after-free in MngInfoDiscardObject in coders/png.c
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 81%
0.0223
ΠΠΈΠ·ΠΊΠΈΠΉ
7 High
CVSS3
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
CVSS3: 9.8
ubuntu
Π±ΠΎΠ»ΡΡΠ΅ 6 Π»Π΅Ρ Π½Π°Π·Π°Π΄
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
CVSS3: 9.8
nvd
Π±ΠΎΠ»ΡΡΠ΅ 6 Π»Π΅Ρ Π½Π°Π·Π°Π΄
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
CVSS3: 9.8
debian
Π±ΠΎΠ»ΡΡΠ΅ 6 Π»Π΅Ρ Π½Π°Π·Π°Π΄
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function ...
github
Π±ΠΎΠ»ΡΡΠ΅ 4 Π»Π΅Ρ Π½Π°Π·Π°Π΄
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 81%
0.0223
ΠΠΈΠ·ΠΊΠΈΠΉ
7 High
CVSS3