Veracode Vulnerability DatabaseVERACODE:39204Denial Of Service (DoS)
0.013 Low
EPSS
Percentile
85.9%
ImageMagick is vulnerable to Denial Of Service (DoS). A malicious user is able to pass a PNG image, causing the conversion process to wait for stdin input resulting in a system hang.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-44267
imagemagick.org/
lists.debian.org/debian-lts-announce/2023/03/msg00008.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV/
lists.fedoraproject.org/archives/list/[email protected]/message/AINSUL2QBKETGYRPA7XSCMJWLUB44M6S/
lists.fedoraproject.org/archives/list/[email protected]/message/ZZLLS37P67CMBRML6OCG42GPCKGRCJNV/
www.debian.org/security/2023/dsa-5347
www.metabaseq.com/imagemagick-zero-days/
Related
