Heap-based Buffer Overflow

🗓️ 01 Nov 2022 08:16:48Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

ImageMagick vulnerable to heap-based buffer overflow in `RelinquishDCMInfo()` function of `dcm.c

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2022-1114	29 Apr 202216:15	–	attackerkb
AlpineLinux	CVE-2022-1114	29 Apr 202215:38	–	alpinelinux
BDU FSTEC	The vulnerability of the RelinquishDCMInfo() function in the dcm.c component of the ImageMagick console graphics editor allows a hacker to access confidential data and also trigger a service denial.	28 Mar 202300:00	–	bdu_fstec
Cloud Foundry	USN-5736-1: ImageMagick vulnerabilities \| Cloud Foundry	3 Feb 202300:00	–	cloudfoundry
CNNVD	Imagemagick Studio ImageMagick 资源管理错误漏洞	29 Apr 202200:00	–	cnnvd
CNVD	ImageMagick Resource Management Error Vulnerability (CNVD-2022-38157)	6 May 202200:00	–	cnvd
CVE	CVE-2022-1114	29 Apr 202215:38	–	cve
Cvelist	CVE-2022-1114	29 Apr 202215:38	–	cvelist
Debian CVE	CVE-2022-1114	29 Apr 202215:38	–	debiancve
EUVD	EUVD-2022-24457	3 Oct 202520:07	–	euvd

Vulners

Node

imagemagick imagemagickMatch7.1.0.25-r1os

AND

imagemagick imagemagickMatch7.0.10.0-r0os

AND

imagemagick imagemagickMatch7.0.10.10-r0os

AND

imagemagick imagemagickMatch7.0.11.9-r0os

AND

imagemagick imagemagickMatch7.1.0.0-r0os

AND

imagemagick imagemagickMatch7.1.0.10-r1os

AND

imagemagick imagemagickMatch7.1.0.4-r0os

AND

imagemagick imagemagickMatch7.0.10.4-r0os

AND

imagemagick imagemagickMatch7.0.10.6-r0os

AND

imagemagick imagemagickMatch7.0.9.26-r0os

AND

imagemagick imagemagickMatch7.1.0.27-r0os

AND

imagemagick imagemagickMatch7.1.0.2-r0os

AND

imagemagick imagemagickMatch7.1.0.26-r0os

AND

imagemagick imagemagickMatch7.0.10.12-r0os

AND

imagemagick imagemagickMatch7.0.10.1-r0os

AND

imagemagick imagemagickMatch7.1.0.16-r1os

AND

imagemagick imagemagickMatch7.0.11.3-r0os

AND

imagemagick imagemagickMatch7.0.11.13-r0os

AND

imagemagick imagemagickMatch7.0.11.1-r0os

AND

imagemagick imagemagickMatch7.1.0.16-r0os

AND

imagemagick imagemagickMatch7.1.0.4-r1os

AND

imagemagick imagemagickMatch7.0.10.9-r0os

AND

imagemagick imagemagickMatch7.1.0.24-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

devel develMatch8:6.9.10.23+dfsg-2.1ubuntu12debian

AND

devel develMatch8:6.9.10.23+dfsg-2.1ubuntu14debian

AND

devel develMatch8:6.9.11.60+dfsg-1ubuntu1debian

AND

devel develMatch8:6.9.10.23+dfsg-2.1ubuntu16debian

AND

devel develMatch8:6.9.10.23+dfsg-2.1ubuntu13debian

AND

debian debian_linux

OR

imagemagick imagemagickMatch8:6.9.11.60+dfsg-1.3debian

AND

imagemagick imagemagickMatch8:6.9.11.24+dfsg-1+b2debian

AND

debian debian_linuxMatch999

OR

imagemagick imagemagickMatch8:6.9.11.24+dfsg-1+b2debian

AND

debian debian_linuxMatch11

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

01 Nov 2022 12:52Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25.8

CVSS 3.17.1

EPSS0.01113

imagemagick heap-based buffer overflow relinquishdcminfo dcm.c dicom image file information disclosure application crash