CVE-2023-39978
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
3.7 Low
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.3%
ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| imagemagick:imagemagick | imagemagick | lt | 6.9.12-91 |
References
github.com/ImageMagick/ImageMagick6/commit/c90e79b3b22fec309cab55af2ee606f71b027b12
github.com/ImageMagick/ImageMagick6/compare/6.9.12-90...6.9.12-91
github.com/rmagick/rmagick/pull/1406/files
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
Related
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
3.7 Low
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.3%