PT-2017-3902
CVE-2017-13777
·
Publicado
2017-08-24
·
Atualizado
2019-12-16
Descrição por
CVSS 2.0
7.1
AltaMétricasAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
GraphicsMagick version 1.3.26
Description
The issue is related to a denial of service in the
ReadXBMImage() function, specifically in the "Read hex image data" version==10 case, which can cause large amounts of CPU and memory consumption. This can lead to resource exhaustion, allowing a remote attacker to cause a denial of service.Recommendations
For GraphicsMagick version 1.3.26, consider disabling the
ReadXBMImage() function as a temporary workaround to prevent potential denial of service attacks until a patch is available.Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾