| Vulnerability Name: | CVE-2022-1115 | ||||||||||||||||||||||||||||
| Assigned: | 2022-08-29 | ||||||||||||||||||||||||||||
| Published: | 2022-08-29 | ||||||||||||||||||||||||||||
| Updated: | 2022-09-06 | ||||||||||||||||||||||||||||
| Summary: | A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service. | ||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
| ||||||||||||||||||||||||||||
| CVSS v2 Severity: | 4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
| ||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-787 | ||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2022-1115 Source: MISC Type: Issue Tracking, Third Party Advisory https://access.redhat.com/security/cve/CVE-2022-1115 Source: MISC Type: Issue Tracking, Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=2067022 Source: MISC Type: Patch, Third Party Advisory https://github.com/ImageMagick/ImageMagick/commit/c8718305f120293d8bf13724f12eed885d830b09 Source: MISC Type: Exploit, Issue Tracking, Third Party Advisory https://github.com/ImageMagick/ImageMagick/issues/4974 Source: MISC Type: Patch, Third Party Advisory https://github.com/ImageMagick/ImageMagick6/commit/1f860f52bd8d58737ad883072203391096b30b51 | ||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||