CVE-2016-10146

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-10146
Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://www.debian.org/security/2017/dsa-3799 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/16/6 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/17/5 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95744 Third Party Advisory VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456 Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201702-09 Third Party Advisory
http://www.debian.org/security/2017/dsa-3799 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/16/6 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/17/5 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95744 Third Party Advisory VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456 Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201702-09 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:43

Type Values Removed Values Added
References () http://www.debian.org/security/2017/dsa-3799 - Mailing List, Third Party Advisory () http://www.debian.org/security/2017/dsa-3799 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2017/01/16/6 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2017/01/16/6 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2017/01/17/5 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2017/01/17/5 - Mailing List, Patch, Third Party Advisory
References () http://www.securityfocus.com/bid/95744 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/95744 - Third Party Advisory, VDB Entry
References () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 - Issue Tracking, Patch, Third Party Advisory () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 - Issue Tracking, Patch, Third Party Advisory
References () https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456 - Issue Tracking, Patch, Third Party Advisory () https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456 - Issue Tracking, Patch, Third Party Advisory
References () https://security.gentoo.org/glsa/201702-09 - Third Party Advisory () https://security.gentoo.org/glsa/201702-09 - Third Party Advisory

19 Nov 2024, 17:29

Type Values Removed Values Added
References () http://www.debian.org/security/2017/dsa-3799 - () http://www.debian.org/security/2017/dsa-3799 - Mailing List, Third Party Advisory
References () https://security.gentoo.org/glsa/201702-09 - () https://security.gentoo.org/glsa/201702-09 - Third Party Advisory
Information

Published : 2017-03-24 15:59

Updated : 2025-04-20 01:37

NVD link : CVE-2016-10146

Mitre link : CVE-2016-10146

CVE.ORG link : CVE-2016-10146

JSON object : View

Products Affected

imagemagick

  • imagemagick
CWE
CWE-399

Resource Management Errors