Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-3428

Опубликовано: 04 окт. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.2

Описание

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

released

8:6.9.11.60+dfsg-1.6ubuntu1
esm-apps/focal

not-affected

code not present
esm-apps/jammy

released

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2
esm-apps/noble

released

8:6.9.11.60+dfsg-1.6ubuntu1
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/xenial

not-affected

code not present
focal

not-affected

code not present
jammy

needed

Показывать по

EPSS

Процентиль: 5%
0.00023
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.2
redhat
почти 2 года назад

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

CVSS3: 6.2
nvd
больше 1 года назад

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

CVSS3: 6.2
debian
больше 1 года назад

A heap-based buffer overflow vulnerability was found in coders/tiff.c ...

CVSS3: 5.5
redos
больше 1 года назад

Уязвимости ImageMagick

CVSS3: 5.5
redos
больше 1 года назад

Уязвимости ImageMagick

EPSS

Процентиль: 5%
0.00023
Низкий

6.2 Medium

CVSS3