CVE-2022-1115

2022-08-2915:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

44.5%

JSON

A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12allimagemagick< 8:6.9.11.60+dfsg-1.6+deb12u1imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian11allimagemagick< 8:6.9.11.60+dfsg-1.3+deb11u3imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian10allimagemagick< 8:6.9.10.23+dfsg-2.1+deb10u1imagemagick_8:6.9.10.23+dfsg-2.1+deb10u1_all.deb
Debian999allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian13allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	imagemagick	< 8:6.9.11.60+dfsg-1.6+deb12u1	imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian	11	all	imagemagick	< 8:6.9.11.60+dfsg-1.3+deb11u3	imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian	10	all	imagemagick	< 8:6.9.10.23+dfsg-2.1+deb10u1	imagemagick_8:6.9.10.23+dfsg-2.1+deb10u1_all.deb
Debian	999	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian	13	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb

0.001 Low

EPSS

Percentile

44.5%

JSON

Related for DEBIANCVE:CVE-2022-1115