Design/Logic Flaw

2019-07-2919:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

JSON

Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the ‘whole image’ into memory.

CPENameOperatorVersion
imgixeq<= 2019619

CPE	Name	Operator	Version
	imgix	eq	<= 2019619

References

obsidianterminal.blogspot.com/2019/07/dos-in-imgix-cdns-image-processing.html