Findings for Container Security, Medium, [TheRedHatter/javagoof:exploits/tomcat-rce/Dockerfile]:Divide By Zero

[armorcodegithubpreprod]

Findings for Container Security, Medium, [TheRedHatter/javagoof:exploits/tomcat-rce/Dockerfile]:Divide By Zero

Component Details

• Exploit Maturity: no-known-exploit
• Vulnerable Package: -
• Current Version: -
• Vulnerable Version(s): >*
• Vulnerable Path: >null

NVD Description

Note:
Versions mentioned in the description apply to the upstream imagemagick package.

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References

• ADVISORY
• MISC
• MISC
• MLIST

Origin : null
Type : null
Image Id : null

Snyk Project Status: Active

---

---

Component Details

• Exploit Maturity: no-known-exploit
• Vulnerable Package: -
• Current Version: -
• Vulnerable Version(s): >*
• Vulnerable Path: >null

NVD Description

Note:
Versions mentioned in the description apply to the upstream imagemagick package.

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References

• ADVISORY
• MISC
• MISC
• MLIST

Origin : null
Type : null
Image Id : null

Snyk Project Status: Active

---

---

Component Details

• Exploit Maturity: no-known-exploit
• Vulnerable Package: -
• Current Version: -
• Vulnerable Version(s): >*
• Vulnerable Path: >null

NVD Description

Note:
Versions mentioned in the description apply to the upstream imagemagick package.

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References

• ADVISORY
• MISC
• MISC
• MLIST

Origin : null
Type : null
Image Id : null

Snyk Project Status: Active

---

---

Component Details

• Exploit Maturity: no-known-exploit
• Vulnerable Package: -
• Current Version: -
• Vulnerable Version(s): >*
• Vulnerable Path: >null

NVD Description

Note:
Versions mentioned in the description apply to the upstream imagemagick package.

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References

• ADVISORY
• MISC
• MISC
• MLIST

Origin : null
Type : null
Image Id : null

Snyk Project Status: Active

---

---

Component Details

• Exploit Maturity: no-known-exploit
• Vulnerable Package: -
• Current Version: -
• Vulnerable Version(s): >*
• Vulnerable Path: >null

NVD Description

Note:
Versions mentioned in the description apply to the upstream imagemagick package.

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References

• ADVISORY
• MISC
• MLIST

Origin : null
Type : null
Image Id : null

Snyk Project Status: Active

---

---

[armorcodegithubpreprod]

Finding [47833608|https://preprod.armorcode.ai/#/findings/257/1167/47833608], [47833607|https://preprod.armorcode.ai/#/findings/257/1167/47833607], [47833609|https://preprod.armorcode.ai/#/findings/257/1167/47833609], [47833611|https://preprod.armorcode.ai/#/findings/257/1167/47833611], [47833610|https://preprod.armorcode.ai/#/findings/257/1167/47833610] are Mitigated
by SYSTEM via ArmorCode Platform