Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Luisfrodo

#30846of 53,630
8.5Total CVSS
Vulnerabilities · 1
PT-2020-6973
8.5
2020-11-30
Unknown · Imagemagick · CVE-2022-48541
**Name of the Vulnerable Software and Affected Versions** ImageMagick versions 6.9.11-22 through 7.0.10-45 **Description** A memory leak in the `identify -help` command allows remote attackers to perform a denial of service. The issue is related to incorrect memory deallocation before removing the last reference, which can be exploited by a remote attacker to disrupt data integrity and cause a denial of service. **Recommendations** For ImageMagick versions 6.9.11-22 through 7.0.10-45, consider disabling the `identify -help` command as a temporary workaround to minimize the risk of exploitation. Restrict access to the `identify` command to prevent remote attackers from performing a denial of service.