Lucene search
Ubuntu.comUB:CVE-2023-29407HistoryAug 02, 2023 - 12:00 a.m.
CVE-2023-29407
2023-08-0200:00:00
ubuntu.com
ubuntu.com
16
cve-2023-29407
tiled image
excessive cpu
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
47.6%
A maliciously-crafted image can cause excessive CPU consumption in
decoding. A tiled image with a height of 0 and a very large width can cause
excessive CPU consumption, despite the image size (width * height)
appearing to be zero.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | golang-golang-x-image | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | golang-golang-x-image | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | golang-golang-x-image | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | golang-golang-x-image | < any | UNKNOWN |
Related
osv
osv
Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
2023-08-02 15:06:21
CVE-2023-29407
2023-08-02 20:15:11
Golang TIFF decoder vulnerable to excessive CPU consumption
2023-08-02 21:30:20
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2023-08-04 02:23:22
github
github
Golang TIFF decoder vulnerable to excessive CPU consumption
2023-08-02 21:30:20
cve
cve
CVE-2023-29407
2023-08-02 20:15:11
prion
prion
Code injection
2023-08-02 20:15:00
debiancve
debiancve
CVE-2023-29407
2023-08-02 20:15:11
redhatcve
redhatcve
CVE-2023-29407
2023-08-07 06:19:07
gitlab
gitlab
Excessive Iteration
2023-08-02 00:00:00
nvd
nvd
CVE-2023-29407
2023-08-02 20:15:11
fedora
fedora
[SECURITY] Fedora 39 Update: golang-x-image-0.13.0-1.fc39
2023-11-03 18:55:01
[SECURITY] Fedora 37 Update: golang-x-image-0.13.0-1.fc37
2023-10-16 01:12:36
[SECURITY] Fedora 38 Update: golang-x-image-0.13.0-1.fc38
2023-10-16 00:43:35
nessus
nessus
Fedora 38 : golang-x-image (2023-4d95d44e7b)
2023-10-15 00:00:00
Fedora 39 : golang-x-image (2023-28cff1a2de)
2023-11-07 00:00:00
Fedora 37 : golang-x-image (2023-c862a1e289)
2023-10-15 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-28cff1a2de)
2023-11-05 00:00:00
Fedora: Security Advisory for golang-x-image (FEDORA-2023-c862a1e289)
2023-10-17 00:00:00
Fedora: Security Advisory for golang-x-image (FEDORA-2023-4d95d44e7b)
2023-10-16 00:00:00
redos
redos
ROS-20231116-02
2023-11-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
47.6%
Related for UB:CVE-2023-29407