Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-13143

Опубликовано: 23 авг. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

РелизСтатусПримечание
artful

not-affected

8:6.9.7.4+dfsg-16ubuntu2
bionic

not-affected

8:6.9.7.4+dfsg-16ubuntu2
devel

not-affected

8:6.9.7.4+dfsg-16ubuntu2
esm-infra-legacy/trusty

released

8:6.7.7.10-6ubuntu3.11
esm-infra/bionic

not-affected

8:6.9.7.4+dfsg-16ubuntu2
esm-infra/xenial

released

8:6.8.9.9-7ubuntu5.11
precise/esm

DNE

trusty

released

8:6.7.7.10-6ubuntu3.11
trusty/esm

released

8:6.7.7.10-6ubuntu3.11
upstream

released

8:6.9.7.4+dfsg-14

Показывать по

EPSS

Процентиль: 54%
0.00313
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
больше 8 лет назад

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

CVSS3: 7.5
nvd
больше 8 лет назад

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

CVSS3: 7.5
debian
больше 8 лет назад

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage ...

CVSS3: 7.5
github
почти 4 года назад

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

EPSS

Процентиль: 54%
0.00313
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-13143