[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2023-1971 --- ImageMagick

ID: oval:org.secpod.oval:def:1701204Date: (C)2023-03-14   (M)2024-01-29
Class: PATCHFamily: unix




An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash. A vulnerability was found in ImageMagick. Memory leaks are detected when executing a crafted file with the convert command, affecting availability. A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system. ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior

Platform:
Amazon Linux 2
Product:
ImageMagick
Reference:
ALAS2-2023-1971
CVE-2021-20224
CVE-2021-3574
CVE-2021-4219
CVE-2022-28463
CVE-2022-32545
CVE-2022-32546
CVE-2022-32547
CVE    7
CVE-2021-4219
CVE-2021-3574
CVE-2022-32546
CVE-2022-32547
...
CPE    2
cpe:/o:amazon:linux:2
cpe:/a:imagemagick:imagemagick

© SecPod Technologies