Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-2719

Опубликовано: 03 апр. 2022
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30.

Отчет

This flaw is out of support scope for ImageMagick shipped in Red Hat Enterprise Linux 6 and 7. Please see https://access.redhat.com/support/policy/updates/errata/ for more info on support scope.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6ImageMagickOut of support scope
Red Hat Enterprise Linux 7ImageMagickOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-617
https://bugzilla.redhat.com/show_bug.cgi?id=2116537ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list

EPSS

Процентиль: 4%
0.0002
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 3 лет назад

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30.

CVSS3: 5.5
nvd
около 3 лет назад

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30.

CVSS3: 5.5
debian
около 3 лет назад

In ImageMagick, a crafted file could trigger an assertion failure when ...

CVSS3: 5.5
github
около 3 лет назад

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30.

suse-cvrf
почти 3 года назад

Security update for ImageMagick

EPSS

Процентиль: 4%
0.0002
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2022-2719