Описание
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
A heap-based-buffer-over-read flaw was found in ImageMagick's PushLongPixel() function of 'quantum-private.h'. This vulnerability is triggered when an attacker passes a specially crafted image file into MagickCore, potentially leading to a denial of service and information disclosure.
Отчет
The versions of ImageMagick shipped with Red Hat Enterprise Linux 6, and 7 are ImageMagick v6.9.10 and lower. These contain a different code-base compared to upstream and the vulnerable code is not present in our code-base.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ImageMagick | Not affected | ||
| Red Hat Enterprise Linux 7 | ImageMagick | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2083056ImageMagick: heap-buffer-overflow in PushLongPixel() of quantum-private.h
EPSS
Процентиль: 29%
0.001
Низкий
6.5 Medium
CVSS3
EPSS
Процентиль: 29%
0.001
Низкий
6.5 Medium
CVSS3