CVE-2021-3610 - log back

CVE-2021-3610 edited at 18 Jun 2021 13:48:29
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary code execution
Description
+ A heap-based buffer overflow vulnerability was found in ImageMagick in ReadTIFFImage() in coders/tiff.c because of an incorrect setting of the pixel array size which can lead to crash and segmentation fault. This flaw affects ImageMagick versions prior to 7.1.0-0 and 7.0.11-14.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=1973689
+ https://github.com/ImageMagick/ImageMagick/commit/930ff0d1a9bc42925a7856e9ea53f5fc9f318bf3
Notes
CVE-2021-3610 created at 18 Jun 2021 13:47:22