Описание
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 8:6.9.7.4+dfsg-16ubuntu2.2 |
| bionic | released | 8:6.9.7.4+dfsg-16ubuntu6.2 |
| devel | released | 8:6.9.7.4+dfsg-16ubuntu8 |
| esm-infra-legacy/trusty | released | 8:6.7.7.10-6ubuntu3.11 |
| esm-infra/bionic | released | 8:6.9.7.4+dfsg-16ubuntu6.2 |
| esm-infra/xenial | released | 8:6.8.9.9-7ubuntu5.11 |
| precise/esm | DNE | |
| trusty | released | 8:6.7.7.10-6ubuntu3.11 |
| trusty/esm | released | 8:6.7.7.10-6ubuntu3.11 |
| upstream | released | 8:6.9.9.34+dfsg-3 |
Показывать по
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in t ...
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
Уязвимость функции ExtractPostscript компонента coders/wpg.c консольного графического редактора ImageMagick, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3