Описание
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and a zero-valued entry length field to trigger an infinite loop in the ICNS parser, as the offset is never incremented when the entry length field is 0, causing the while loop condition to remain true indefinitely.
A flaw was found in image-size. A remote attacker can exploit this vulnerability by providing a specially crafted ICNS image buffer. This malicious buffer, containing valid magic bytes and a zero-valued entry length, causes an infinite loop in the ICNS parser. This can permanently block the Node.js event loop, leading to a denial of service (DoS) for the affected system.
Отчет
A flaw was found in the image-size npm package. A crafted ICNS image buffer with a zero-valued entry length field can trigger an infinite loop in the ICNS parser, permanently blocking the Node.js event loop and causing a denial of service.
Меры по смягчению последствий
Upgrade to a version of image-size that validates ICNS entry length fields. As a workaround, validate image inputs before passing them to image-size, rejecting ICNS files with zero-length entries.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Gatekeeper 3 | gatekeeper/gatekeeper-rhel9 | Fix deferred | ||
| Red Hat Build of Podman Desktop | rh-podman-desktop.git | Fix deferred | ||
| Red Hat Discovery 2 | discovery/discovery-ui-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux 8 | grafana | Fix deferred | ||
| Red Hat Enterprise Linux 8 | grafana-pcp | Fix deferred | ||
| Red Hat Fuse 7 | image-size | Fix deferred | ||
| Red Hat JBoss Enterprise Application Platform 7 | image-size | Fix deferred | ||
| Red Hat JBoss Enterprise Application Platform 8 | image-size | Fix deferred | ||
| Red Hat JBoss Enterprise Application Platform Expansion Pack | image-size | Fix deferred | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 | Affected |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and a zero-valued entry length field to trigger an infinite loop in the ICNS parser, as the offset is never incremented when the entry length field is 0, causing the while loop condition to remain true indefinitely.
image-size: ICNS parser allows denial of service through an infinite loop
EPSS
6.5 Medium
CVSS3