CVE-2016-7515

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-7515

Severity

6.5

Medium

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

Description

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.

References

https://nvd.nist.gov/vuln/detail/CVE-2016-7515
https://github.com/advisories/GHSA-5668-x27c-mqff
http://www.openwall.com/lists/oss-security/2016/09/22/2
http://www.securityfocus.com/bid/93120
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533445
https://bugzilla.redhat.com/show_bug.cgi?id=1378741
https://github.com/ImageMagick/ImageMagick/issues/82
https://github.com/ImageMagick/ImageMagick/commit/2ad6d33493750a28a5a655d319a8e0b16c392de1

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CVE-2016-7515

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company