8.8

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imagemagick ≫ Imagemagick Version < 6.9.10-50
Imagemagick ≫ Imagemagick Version >= 7.0.0-0 < 7.0.8-50
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.04
Canonical ≫ Ubuntu Linux Version19.10
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.2 < 11.6.5.2
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 < 12.1.5.2
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 < 13.1.3.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 < 14.1.2.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 15.0.0 < 15.0.1.3
F5 ≫ Big-ip Application Acceleration Manager Version >= 15.1.0 < 15.1.0.2
F5 ≫ Big-ip Webaccelerator Version >= 11.5.2 < 11.6.5.2
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 < 12.1.5.2
F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 < 13.1.3.4
F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 < 14.1.2.5
F5 ≫ Big-ip Webaccelerator Version >= 15.0.0 < 15.0.1.3
F5 ≫ Big-ip Webaccelerator Version >= 15.1.0 < 15.1.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.29% 0.869
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2020/dsa-4712
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
Broken Link
https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4192-1/
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/cdb383749ef7b68a38891440af8cc23e0115306d
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1599
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1e59b29e520d2beab73e8c78aacd5f1c0d76196d
Patch
Third Party Advisory
https://support.f5.com/csp/article/K20336394
Third Party Advisory
https://support.f5.com/csp/article/K20336394?utm_source=f5support&amp%3Butm_medium=RSS