Denial Of Service (DoS)

🗓️ 06 Dec 2020 03:28:47Reported by Veracode Vulnerability DatabaseType

ImageMagick vulnerability to denial of service attack

Reporter	Title	Published	Views	Family All 109
AlpineLinux	CVE-2018-16643	6 Sep 201822:00	–	alpinelinux
BDU FSTEC	The vulnerabilities of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the console image editor ImageMagick components, related to the lack of data validation, allow attackers to trigger service interruptions.	2 Jul 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 7 : ImageMagick (RHSA-2020:1180)	10 Apr 202000:00	–	nessus
Tenable Nessus	Debian DLA-1530-1 : imagemagick security update	4 Oct 201800:00	–	nessus
Tenable Nessus	Debian DLA-2366-1 : imagemagick security update	8 Sep 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : ImageMagick (openSUSE-2018-1108)	9 Oct 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : ImageMagick (openSUSE-2018-1181)	18 Oct 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : ImageMagick (openSUSE-2019-758)	27 Mar 201900:00	–	nessus
Tenable Nessus	RHEL 7 : ImageMagick (RHSA-2020:1180)	31 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 5 : imagemagick (Unpatched Vulnerability)	11 May 202400:00	–	nessus

Vulners

Node

imagemagick imagemagickMatch8:6.9.7.4+dfsg-11+deb9u8debian

AND

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2018/10/msg00002.html
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00007.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-16643
github	www.github.com/ImageMagick/ImageMagick/commit/6b6bff054d569a77973f2140c0e86366e6168a6c
github	www.github.com/ImageMagick/ImageMagick/issues/1199
usn	www.usn.ubuntu.com/3785-1/

19 Apr 2022 18:32Current

5.1Medium risk

Vulners AI Score5.1

CVSS 24.3

CVSS 36.5

EPSS0.0308