PT-2017-3902

CVE-2017-13777

·

Publicado

2017-08-24

·

Atualizado

2019-12-16

Descrição por

CVSS 2.0
7.1
Alta
MétricasAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26
Description The issue is related to a denial of service in the ReadXBMImage() function, specifically in the "Read hex image data" version==10 case, which can cause large amounts of CPU and memory consumption. This can lead to resource exhaustion, allowing a remote attacker to cause a denial of service.
Recommendations For GraphicsMagick version 1.3.26, consider disabling the ReadXBMImage() function as a temporary workaround to prevent potential denial of service attacks until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
DLA-1082-1
DLA-1456-1
DSA-4321-1
DSA-4321-2
SUSE-SU-2017:3435-1
USN-4222-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾