Lucene search
Veracode Vulnerability DatabaseVERACODE:37567HistoryOct 14, 2022 - 1:27 p.m.
Denial Of Service (DoS)
2022-10-1413:27:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
imagemagick
buffer-over-read
denial of service
tiff
information disclosure
0.001 Low
EPSS
Percentile
38.5%
A heap-based-buffer-over-read flaw was found in ImageMagick’s GetPixelAlpha() function of ‘pixel-accessor.h’. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
References
Related
suse
suse
Security update for ImageMagick (moderate)
2022-02-21 00:00:00
osv
osv
CVE-2022-0284
2022-08-29 15:15:09
nvd
nvd
CVE-2022-0284
2022-08-29 15:15:09
alpinelinux
alpinelinux
CVE-2022-0284
2022-08-29 15:15:09
nessus
nessus
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2022:0540-1)
2022-02-22 00:00:00
openSUSE 15 Security Update : ImageMagick (openSUSE-SU-2022:0540-1)
2022-02-22 00:00:00
GLSA-202405-02 : ImageMagick: Multiple Vulnerabilities
2024-05-04 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0540-1)
2022-02-22 00:00:00
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2022:0540-1)
2022-02-22 00:00:00
Mageia: Security Advisory (MGASA-2022-0446)
2022-12-07 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0244
2022-09-08 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0244
2022-09-08 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0449
2022-09-09 00:00:00
ubuntucve
ubuntucve
CVE-2022-0284
2022-08-29 00:00:00
prion
prion
Heap overflow
2022-08-29 15:15:00
cve
cve
CVE-2022-0284
2022-08-29 15:15:09
redhatcve
redhatcve
CVE-2022-0284
2022-02-03 10:05:54
cvelist
cvelist
CVE-2022-0284
2022-08-29 14:03:03
debiancve
debiancve
CVE-2022-0284
2022-08-29 15:15:09
mageia
mageia
Updated imagemagick packages fix security vulnerability
2022-12-07 02:32:48
gentoo
gentoo
ImageMagick: Multiple Vulnerabilities
2024-05-04 00:00:00