Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ayjc-27p7-xkfs
Summary
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images.
Aliases
0
alias GHSA-98cp-rj9f-6v5g
Fixed_packages
0
url pkg:nuget/Magick.NET-Q16-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q16-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-arm64@14.12.0
1
url pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-arm64@14.12.0
2
url pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64@14.12.0
3
url pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.12.0
purl pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64@14.12.0
4
url pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-OpenMP-arm64@14.12.0
5
url pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.12.0
purl pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q16-OpenMP-x64@14.12.0
6
url pkg:nuget/Magick.NET-Q8-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q8-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-arm64@14.12.0
7
url pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.12.0
purl pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-OpenMP-arm64@14.12.0
8
url pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.12.0
purl pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.12.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.12.0
Affected_packages
References
0
reference_url https://github.com/ImageMagick/ImageMagick
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ImageMagick/ImageMagick
1
reference_url https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-98cp-rj9f-6v5g
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-98cp-rj9f-6v5g
2
reference_url https://github.com/advisories/GHSA-98cp-rj9f-6v5g
reference_id GHSA-98cp-rj9f-6v5g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-98cp-rj9f-6v5g
Weaknesses
0
cwe_id 121
name Stack-based Buffer Overflow
description A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Exploits
Severity_range_score4.0 - 6.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ayjc-27p7-xkfs