Memory Leak Vulnerability in ImageMagick by ImageMagick Studio LLC
CVE-2014-9842

7.5HIGH

Key Information:

Vendor

Opensuse Project

Status
Suse Linux Enterprise Workstation Extension
Leap
Suse Linux Enterprise Server
Suse Linux Enterprise Desktop
Vendor
CVE Published:
20 March 2017

What is CVE-2014-9842?

A vulnerability exists in the ReadPSDLayers function of ImageMagick 6.8.9.9 that allows remote attackers to exploit a memory leak. This issue can lead to denial of service through excessive memory consumption via unspecified vectors. It is crucial for users to be aware of this vulnerability and apply available patches to prevent potential service disruptions.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1343500
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016...
vendor-advisoryx_refsource_SUSE
https://anonscm.debian.org/cgit/collab-maint/imagemagick....
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.