Veracode Vulnerability DatabaseVERACODE:36828Denial Of Service (DoS)
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
29.2%
ImageMagick is vulnerable to denial of service (DoS) attacks. A malicious user is able to cause the application to crash, when executing a crafted file with the convert command.
References
github.com/ImageMagick/ImageMagick/commit/c6ad94fbb7b280f39c2fbbdc1c140e51b1b466e9
github.com/ImageMagick/ImageMagick/issues/3540
github.com/ImageMagick/ImageMagick6/commit/cd7f9fb7751b0d59d5a74b12d971155caad5a792
lists.debian.org/debian-lts-announce/2023/03/msg00008.html
lists.fedoraproject.org/archives/list/[email protected]/message/4Q6MJAMGHGB552KSFTQKXEKJVQNM4MCT/
lists.fedoraproject.org/archives/list/[email protected]/message/5C6XAGUFPUF4SNVCI2T4OJK3EFIENBGP/
lists.fedoraproject.org/archives/list/[email protected]/message/LNVDNM4ZEIYPT3SLZHPYN7OG4CZLEXZJ/
Related
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
29.2%