7.1
CVE-2022-48541
- EPSS 0.45%
- Published 22.08.2023 19:16:31
- Last modified 21.11.2024 07:33:29
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
Data is provided by the National Vulnerability Database (NVD)
Imagemagick ≫ Imagemagick Version6.9.11-22
Imagemagick ≫ Imagemagick Version7.0.10-45
Fedoraproject ≫ Fedora Version38
Fedoraproject ≫ Fedora Version39
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.45% | 0.628 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 2.8 | 4.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.