CVE-2022-3213

2022-09-1918:15:09

Debian Security Bug Tracker

security-tracker.debian.org

imagemagick

tiff file

heap buffer overflow

denial of service

unix

cve-2022-3213

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

29.4%

JSON

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12allimagemagick< 8:6.9.11.60+dfsg-1.6+deb12u1imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian11allimagemagick< 8:6.9.11.60+dfsg-1.3+deb11u3imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian999allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian13allimagemagick< 8:6.9.12.98+dfsg1-2imagemagick_8:6.9.12.98+dfsg1-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	imagemagick	< 8:6.9.11.60+dfsg-1.6+deb12u1	imagemagick_8:6.9.11.60+dfsg-1.6+deb12u1_all.deb
Debian	11	all	imagemagick	< 8:6.9.11.60+dfsg-1.3+deb11u3	imagemagick_8:6.9.11.60+dfsg-1.3+deb11u3_all.deb
Debian	999	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb
Debian	13	all	imagemagick	< 8:6.9.12.98+dfsg1-2	imagemagick_8:6.9.12.98+dfsg1-2_all.deb