[Git][security-tracker-team/security-tracker][master] CVE-2022-1114

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4e1232a by Bastien Roucariès at 2024-02-21T12:54:28+00:00
CVE-2022-1114

Tested against poc:
convert-im6.q16: insufficient image data in file `poc' @ error/dcm.c/ReadDCMImage/3313.
convert-im6.q16: no images defined `/dev/null' @ error/convert.c/ConvertImageCommand/3258.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135127,7 +135127,7 @@ CVE-2022-1115 (A heap-buffer-overflow flaw was found in ImageMagick\u2019s PushS
 CVE-2022-1114 (A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInf ...)
 	- imagemagick 8:6.9.11.60+dfsg-1.5 (bug #1013282)
 	[bullseye] - imagemagick 8:6.9.11.60+dfsg-1.3+deb11u2
-	[buster] - imagemagick <no-dsa> (Minor issue)
+	[buster] - imagemagick <not-affected> (Vulnerable code not present, bail out early)
 	[stretch] - imagemagick <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/4947
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/78f03b619d08d7c2e0fcaccab407e3ac93c2ee8f



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4e1232aa1a21f8511b8463070273070ce72fc07

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4e1232aa1a21f8511b8463070273070ce72fc07
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240221/0e6f4441/attachment.htm>