Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-14248

Опубликовано: 11 сент. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

РелизСтатусПримечание
artful

not-affected

devel

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/xenial

not-affected

precise/esm

DNE

trusty

not-affected

trusty/esm

not-affected

upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

Ссылки на источники

EPSS

Процентиль: 51%
0.00281
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
больше 8 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS3: 6.5
nvd
больше 8 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS3: 6.5
debian
больше 8 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c ...

CVSS3: 6.5
github
больше 3 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

EPSS

Процентиль: 51%
0.00281
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3