CVE-2014-9854

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-9854
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://git.imagemagick.org/repos/ImageMagick/commit/7fb9b7e095a65b4528d0180e26574f2bc7cd0e8b Patch
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/02/13 Mailing List Patch
http://www.ubuntu.com/usn/USN-3131-1 Third Party Advisory
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=5ee6f49297c8137cae527429e0267462c14ec3ed Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1343514 Issue Tracking Patch Third Party Advisory
http://git.imagemagick.org/repos/ImageMagick/commit/7fb9b7e095a65b4528d0180e26574f2bc7cd0e8b Patch
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/02/13 Mailing List Patch
http://www.ubuntu.com/usn/USN-3131-1 Third Party Advisory
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=5ee6f49297c8137cae527429e0267462c14ec3ed Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1343514 Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*
History

21 Nov 2024, 02:21

Type Values Removed Values Added
References () http://git.imagemagick.org/repos/ImageMagick/commit/7fb9b7e095a65b4528d0180e26574f2bc7cd0e8b - Patch () http://git.imagemagick.org/repos/ImageMagick/commit/7fb9b7e095a65b4528d0180e26574f2bc7cd0e8b - Patch
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2016/06/02/13 - Mailing List, Patch () http://www.openwall.com/lists/oss-security/2016/06/02/13 - Mailing List, Patch
References () http://www.ubuntu.com/usn/USN-3131-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-3131-1 - Third Party Advisory
References () https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=5ee6f49297c8137cae527429e0267462c14ec3ed - Patch () https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=5ee6f49297c8137cae527429e0267462c14ec3ed - Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=1343514 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=1343514 - Issue Tracking, Patch, Third Party Advisory

04 Nov 2024, 18:49

Type Values Removed Values Added
CPE cpe:2.3:a:imagemagick:imagemagick:-:*:*:*:*:*:*:* cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Information

Published : 2017-03-17 14:59

Updated : 2024-11-21 02:21

NVD link : CVE-2014-9854

Mitre link : CVE-2014-9854

CVE.ORG link : CVE-2014-9854

JSON object : View

Products Affected

imagemagick

  • imagemagick

opensuse

  • leap
  • opensuse

suse

  • linux_enterprise_server
  • linux_enterprise_software_development_kit
  • suse_linux_enterprise_server

canonical

  • ubuntu_linux
CWE
CWE-399

Resource Management Errors