CVSS: 7.1EPSS: 0%CPEs: 6EXPL: 1CVE-2017-1000476 – ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c
https://notcve.org/view.php?id=CVE-2017-1000476
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. Se ha encontrado una vulnerabilidad de agotamiento de CPU en ImageMagick 7.0.7-12 Q16 en la función ReadPDBImage en coders/dds.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio. • http://www.securityfocus.com/bid/102428 https://github.com/ImageMagick/ImageMagick/issues/867 https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html https://usn.ubuntu.com/3681-1 https://access.redhat.com/security/cve/CVE-2017-1000476 https://bugzilla.redhat.com/show_bug.cgi?id=1532845 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2017-1000445
https://notcve.org/view.php?id=CVE-2017-1000445
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service ImageMagick 7.0.7-1 y anteriores es vulnerable a una desreferencia de puntero NULL en el componente MagickCore. Esto podría desembocar en una denegación de servicio (DoS). • http://www.securityfocus.com/bid/102368 https://github.com/ImageMagick/ImageMagick/issues/775 https://lists.debian.org/debian-lts-announce/2018/01/msg00002.html https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html https://usn.ubuntu.com/3681-1 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2017-18008
https://notcve.org/view.php?id=CVE-2017-18008
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. ImageMagick 7.0.7-17 Q16 tiene una fuga de memoria en ReadPWPImage en coders/pwp.c. • http://www.securityfocus.com/bid/102346 https://github.com/ImageMagick/ImageMagick/issues/921 https://usn.ubuntu.com/3681-1 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-17934
https://notcve.org/view.php?id=CVE-2017-17934
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls. ImageMagick 7.0.7-17 Q16 x86_64 tiene filtrados de memoria en coders/msl.c. Esto está relacionado con MSLPopImage y ProcessMSLScript, y se asocia a una mala gestión de llamadas MSLPushImage. • http://www.securityfocus.com/bid/102314 https://github.com/ImageMagick/ImageMagick/issues/920 https://usn.ubuntu.com/3681-1 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.1EPSS: 0%CPEs: 6EXPL: 0CVE-2017-17914
https://notcve.org/view.php?id=CVE-2017-17914
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file. Se ha encontrado una vulnerabilidad en ImageMagick 7.0.7-16 Q16 en la función ReadOnePNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (bucle ReadOneMNGImage de gran tamaño) mediante un archivo de imagen mng manipulado. • https://github.com/ImageMagick/ImageMagick/issues/908 https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html https://usn.ubuntu.com/3681-1 • CWE-834: Excessive Iteration •