Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-48541
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2022-48541

2023-08-2219:16:31
Debian Security Bug Tracker
security-tracker.debian.org
26
imagemagick
memory leak
denial of service
vulnerability
cve-2022-48541
unix

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

0.001 Low

EPSS

Percentile

35.0%

A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the “identify -help” command.

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

0.001 Low

EPSS

Percentile

35.0%