CVE-2022-3213

🗓️ 19 Sep 2022 17:31:48Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 97 Views

A heap buffer overflow in ImageMagick could cause denial of servic

Reporter	Title	Published	Views	Family All 52
ATTACKERKB	CVE-2022-3213	19 Sep 202218:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : ImageMagick (ALAS2022-2022-215)	10 Dec 202200:00	–	nessus
Tenable Nessus	GLSA-202405-02 : ImageMagick: Multiple Vulnerabilities	4 May 202400:00	–	nessus
Tenable Nessus	Photon OS 4.0: Imagemagick PHSA-2022-4.0-0252	23 Jul 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2022:3487-1)	2 Oct 202200:00	–	nessus
AlpineLinux	CVE-2022-3213	19 Sep 202217:31	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в imagemagick	11 Feb 202507:35	–	astralinux
Circl	CVE-2022-3213	19 Sep 202222:38	–	circl
CNNVD	ImageMagick 缓冲区错误漏洞	19 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3213	19 Sep 202217:31	–	cvelist

NVD

Vulners

Node

imagemagick imagemagickRange<6.9.12-62

imagemagick imagemagickRange7.1.0-0–7.1.0-47

Node

fedoraproject extra_packages_for_enterprise_linuxMatch8.0

fedoraproject extra_packages_for_enterprise_linuxMatch9.0

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

[
  {
    "product": "ImageMagick",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in ImageMagick 7.1.0-47, ImageMagick 6.9.12-62"
      }
    ]
  }
]

Source	Link
github	www.github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95be854fe84e6c2a2
access	www.access.redhat.com/security/cve/CVE-2022-3213
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e41fe7cb70030e8750

21 Nov 2024 07:19Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.5

EPSS0.00035