CVE-2014-8561 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
imagemagick	imagemagick	6.8.9-6
debian	debian_linux	8.0
debian	debian_linux	9.0
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

imagemagick

bookworm	8:6.9.11.60+dfsg-1.6+deb12u2 fixed
bookworm (security)	8:6.9.11.60+dfsg-1.6+deb12u1 fixed
bullseye	8:6.9.11.60+dfsg-1.3+deb11u4 fixed
bullseye (security)	8:6.9.11.60+dfsg-1.3+deb11u3 fixed
sid	8:7.1.1.39+dfsg1-2 fixed
squeeze	not-affected
trixie	8:6.9.13.12+dfsg1-1 fixed
wheezy	not-affected

Ubuntu Releases

Ubuntu Product

Codename

imagemagick

lucid	ignored
precise	not-affected
trusty	not-affected
utopic	not-affected

Common Weakness Enumeration

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References

http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html

http://seclists.org/fulldisclosure/2014/Nov/1

http://www.openwall.com/lists/oss-security/2014/10/31/3

https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-8561

https://security-tracker.debian.org/tracker/CVE-2014-8561

http://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html

http://seclists.org/fulldisclosure/2014/Nov/1

http://www.openwall.com/lists/oss-security/2014/10/31/3

https://bugs.gentoo.org/show_bug.cgi?id=CVE-2014-8561

https://security-tracker.debian.org/tracker/CVE-2014-8561