CVE-2014-9852

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-9852

Severity

9.8

Critical

CVSS CVSS_V3

Description

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

References

https://images.chainguard.dev/security/CGA-334v-8x3g-rfh7
https://github.com/advisories/GHSA-6hr3-77qj-w9w9
http://www.openwall.com/lists/oss-security/2016/06/02/13
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=37ec7d53dcb99fbd1f5c33442594d5e279630563
https://bugzilla.redhat.com/show_bug.cgi?id=1343512
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
https://security-tracker.debian.org/tracker/CVE-2014-9852

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

CVE-2014-9852

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources