CVE-2023-5349
Summary
| CVE | CVE-2023-5349 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-10-30 21:15:00 UTC |
|---|
| Updated | 2023-11-09 02:15:00 UTC |
|---|
| Description | A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Fix memory leak in `Magick::Draw` for recentry ImageMagick 6 by removing unnecessary `GetDrawInfo()` calling by Watson1978 · Pull Request #1406 · rmagick/rmagick · GitHub |
MISC |
github.com |
|
| cve-details |
MISC |
access.redhat.com |
|
| Huge memory consumption with latest imagemagick@6 update · Issue #1401 · rmagick/rmagick · GitHub |
MISC |
github.com |
|
| [SECURITY] Fedora 37 Update: rubygem-rmagick-5.2.0-2.fc37 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| 2247064 – (CVE-2023-5349) CVE-2023-5349 rubygem-rmagick: Memory leak by Magick::Draw while calling GetDrawInfo() |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 284721 Fedora Security Update for rubygem (FEDORA-2023-8dd1a1a2e6)
- 6000258 Debian Security Update for ruby-rmagick (DLA 3625-1)
- 995798 Rubygems (Rubygems) Security Update for rmagick (GHSA-frgf-8jr5-j2jv)
