Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4581
HistoryJul 17, 2017 - 6:20 p.m.

Denial Of Service (DoS) Through Large Loop

2017-07-1718:20:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

35.1%

ImageMagick is vulnerable to denial of service (DoS) attacks. These attacks are possible through the ReadRLEImage function in coders\rle.c which contains a large loop. If a rle file is passed to the application with a large number_pixels value, it can cause a denial of service condition through CPU exhaustion.