PT-2017-3902
CVE-2017-13777
·
تاريخ النشر
2017-08-24
·
تاريخ التحديث
2019-12-16
الوصف من
CVSS 2.0
7.1
عاليةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
GraphicsMagick version 1.3.26
Description
The issue is related to a denial of service in the
ReadXBMImage() function, specifically in the "Read hex image data" version==10 case, which can cause large amounts of CPU and memory consumption. This can lead to resource exhaustion, allowing a remote attacker to cause a denial of service.Recommendations
For GraphicsMagick version 1.3.26, consider disabling the
ReadXBMImage() function as a temporary workaround to prevent potential denial of service attacks until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾