Описание
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 8:6.9.7.4+dfsg-16ubuntu6.7 |
| cosmic | released | 8:6.9.10.8+dfsg-1ubuntu2.2 |
| devel | not-affected | 8:6.9.10.14+dfsg-7ubuntu2 |
| disco | not-affected | 8:6.9.10.14+dfsg-7ubuntu2 |
| esm-apps/focal | not-affected | 8:6.9.10.14+dfsg-7ubuntu2 |
| esm-apps/jammy | not-affected | 8:6.9.10.14+dfsg-7ubuntu2 |
| esm-apps/noble | not-affected | 8:6.9.10.14+dfsg-7ubuntu2 |
| esm-infra-legacy/trusty | needed | |
| esm-infra/bionic | not-affected | 8:6.9.7.4+dfsg-16ubuntu6.7 |
| esm-infra/xenial | not-affected | 8:6.8.9.9-7ubuntu5.14 |
Показывать по
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x3 ...
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
ELSA-2020-1180: ImageMagick security, bug fix, and enhancement update (MODERATE)
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3