Denial Of Service (DoS)

2020-04-0100:39:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.027 Low

EPSS

Percentile

90.5%

JSON

ImageMagick is vulnerable to denial of service (DoS). The attack exists because the function in ReadImage in MagickCore/constitute.c does not properly handle the input matlab image file.

CPENameOperatorVersion
inkscapeeq0.92.2__2.el7
autotraceeq0.31.1__37.el7
emacseq24.3__20.el7_4
emacseq24.3__22.el7
imagemagickeq6.7.8.9__18.el7
imagemagickeq6.7.8.9__16.el7_6
imagemagickeq6.7.8.9__15.el7_2
imagemagick:bullseyeeq8:6.9.11.24+dfsg-1+b2
imagemagick:sideq8:6.9.11.24+dfsg-1+b2

Name	Operator	Version
inkscape	eq	0.92.2__2.el7
autotrace	eq	0.31.1__37.el7
emacs	eq	24.3__20.el7_4
emacs	eq	24.3__22.el7
imagemagick	eq	6.7.8.9__18.el7
imagemagick	eq	6.7.8.9__16.el7_6
imagemagick	eq	6.7.8.9__15.el7_2
imagemagick:bullseye	eq	8:6.9.11.24+dfsg-1+b2
imagemagick:sid	eq	8:6.9.11.24+dfsg-1+b2