CVE-2016-10146

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-10146

Severity

7.5

High

CVSS CVSS_V3

Description

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

References

https://images.chainguard.dev/security/CGA-5qmm-w68v-5mr4
https://github.com/advisories/GHSA-jgvh-5gxq-hwh4
http://www.debian.org/security/2017/dsa-3799
http://www.securityfocus.com/bid/95744
https://security.gentoo.org/glsa/201702-09
http://www.openwall.com/lists/oss-security/2017/01/16/6
http://www.openwall.com/lists/oss-security/2017/01/17/5
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380
https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456
https://security-tracker.debian.org/tracker/CVE-2016-10146

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal