Lucene search

RedhatCVE-2023-2157

HistoryJun 06, 2023 - 8:15 p.m.

CVE-2023-2157

2023-06-0620:15:12

CWE-787

CWE-122

redhat

web.nvd.nist.gov

251

cve-2023-2157

heap-based buffer overflow

imagemagick

vulnerability

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.

Affected configurations

Nvd

Vulners

Node

imagemagickimagemagickRange<7.1.1-9

VendorProductVersionCPE
imagemagickimagemagick*cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
imagemagick	imagemagick	*	cpe:2.3:a:imagemagick:imagemagick::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ImageMagick",
    "versions": [
      {
        "version": "ImageMagick 7.1.1-9",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2208537

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Related for CVE-2023-2157