Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-1270
HistorySep 28, 2022 - 8:15 p.m.

CVE-2022-1270

2022-09-2820:15:10
Alpine Linux Development Team
security.alpinelinux.org
19
graphicsmagick
heap buffer
overflow
parsing
miff
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

27.1%

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

27.1%