Summary
Nick Browning discovered that RMagick incorrectly handled memory under
certain operations. An attacker could possibly use this issue to cause
a denial of service through memory exhaustion.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ruby-rmagick | 2.16.0-6ubuntu0.1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ruby-rmagick | 4.2.3-2ubuntu0.22.04.1~esm2 |
Vulnerabilities 1
-
Medium 5.3
Draw while calling getdrawinfo()
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion.
References
-
report
https://ubuntu.com/security/CVE-2023-5349