Lucene search

Veracode Vulnerability DatabaseVERACODE:4668

HistoryJul 25, 2017 - 8:30 p.m.

Denial Of Service (DoS)

2017-07-2520:30:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

ImageMagick is vulnerable to denial of service (DoS) attacks. AcquireVirtualMemory has a memory leak which is triggered when AcquireMagickResource starts returning false.

CPENameOperatorVersion
imagemagickle6.8.8-9
imagemagickle6.8.8-9

CPE	Name	Operator	Version
	imagemagick	le	6.8.8-9
	imagemagick	le	6.8.8-9

References

www.imagemagick.org/discourse-server/viewtopic.php?f=2&t=28946

www.openwall.com/lists/oss-security/2016/08/07/1

www.openwall.com/lists/oss-security/2017/07/21/4

www.securityfocus.com/bid/99944

access.redhat.com/errata/RHSA-2017:2628

access.redhat.com/errata/RHSA-2017:3466

access.redhat.com/errata/RHSA-2017:3470

access.redhat.com/errata/RHSA-2017:3471

access.redhat.com/errata/RHSA-2017:3472

access.redhat.com/errata/RHSA-2017:3473

access.redhat.com/errata/RHSA-2017:3474

access.redhat.com/security/cve/CVE-2017-7539

bugzilla.redhat.com/show_bug.cgi?id=1378776

bugzilla.redhat.com/show_bug.cgi?id=1473622

bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7539

git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=2b0bbc4f8809c972bad134bc1a2570dbb01dea0b

git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=ff82911cd3f69f028f2537825c9720ff78bc3f19

git.qemu.org/?p=qemu.git;a=commitdiff;h=2b0bbc4f8809c972bad134bc1a2570dbb01dea0b

git.qemu.org/?p=qemu.git;a=commitdiff;h=ff82911cd3f69f028f2537825c9720ff78bc3f19

github.com/ImageMagick/ImageMagick/commit/4e81ce8b07219c69a9aeccb0f7f7b927ca6db74c

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Related for VERACODE:4668