Lucene search
Veracode Vulnerability DatabaseVERACODE:5378HistoryNov 06, 2017 - 4:17 a.m.
Denial Of Service (DoS)
2017-11-0604:17:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.021 Low
EPSS
Percentile
89.4%
ImageMagick is vulnerable to denial of service (DoS) attacks. A malicious user can pass a WPG image file to the application, causing a heap allocation error that can crash the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imagemagick | le | 6.8.8-9 |
References
github.com/ImageMagick/ImageMagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53
github.com/ImageMagick/ImageMagick/commit/e04cf3e9524f50ca336253513d977224e083b816
github.com/ImageMagick/ImageMagick/issues/851
usn.ubuntu.com/3681-1/
www.debian.org/security/2017/dsa-4040
www.debian.org/security/2017/dsa-4074
Related
cve
cve
CVE-2017-16546
2017-11-05 22:29:00
cvelist
cvelist
CVE-2017-16546
2017-11-05 22:00:00
redhatcve
redhatcve
CVE-2017-16546
2017-11-16 10:49:34
prion
prion
Design/Logic Flaw
2017-11-05 22:29:00
nvd
nvd
CVE-2017-16546
2017-11-05 22:29:00
debiancve
debiancve
CVE-2017-16546
2017-11-05 22:29:00
ubuntucve
ubuntucve
CVE-2017-16546
2017-11-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4074-1)
2017-12-27 00:00:00
openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2017:3223-1)
2017-12-07 00:00:00
Debian: Security Advisory (DSA-4040-1)
2017-11-16 00:00:00
debian
debian
[SECURITY] [DSA 4074-1] imagemagick security update
2017-12-28 09:40:05
[SECURITY] [DSA 4040-1] imagemagick security update
2017-11-17 22:51:42
nessus
nessus
Debian DSA-4074-1 : imagemagick - security update
2017-12-29 00:00:00
openSUSE Security Update : GraphicsMagick (openSUSE-2017-1346)
2017-12-14 00:00:00
Debian DSA-4040-1 : imagemagick - security update
2017-11-20 00:00:00
osv
osv
imagemagick - security update
2017-12-28 00:00:00
imagemagick - security update
2017-11-17 00:00:00
suse
suse
Security update for GraphicsMagick (important)
2017-12-06 03:09:38
Security update for GraphicsMagick (important)
2017-12-27 15:08:30
Security update for ImageMagick (important)
2017-12-20 18:09:33
ibm
ibm
cloudfoundry
cloudfoundry
USN-3681-1: ImageMagick vulnerabilities | Cloud Foundry
2018-06-14 00:00:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2018-06-12 00:00:00
mageia
mageia
Updated imagemagick packages fix security vulnerabilities
2018-05-12 09:28:12