yun2025 发表于 昨天 13:38

人民大学蓝虹谈以生态信用支持海洋保护

人民大学蓝虹谈以生态信用支持海洋保护

imgproxy:ICO图片尺寸计算可能溢出

11月8日公开的漏洞记录CVE-2026-123614涉及imgproxy。问题出在图像代理读取ICO图标时。一项尺寸数据先参与整数运算,再用于申请内存。如果计算结果回绕,实际留出的缓冲区就可能小于后续写入的数据量。接收外部提交图片的服务可能因此崩溃,公告还列出在进程中执行代码的风险。版本清单标出的受影响范围包括4.0.0起至4.0.16之前。记录另将4.0.16列为不受影响的版本。

这条记录给出的CVSS 3.1基础评分为9.8分,分级为严重。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/46668e95f4329d4c84dedb7381f45e4d
https://lightroom.adobe.com/shares/7213dea198ec8c4db923db485b2772ce
https://lightroom.adobe.com/shares/ab75eb17b8e6bd43aefe2a8765961945
https://lightroom.adobe.com/shares/99e205a53414ce46bb1e91bc92110cef
https://lightroom.adobe.com/shares/3fea5df087c5f042bc0370e4ba004bbf
https://lightroom.adobe.com/shares/3f724bf0dc2fdc459c1679e2d7055849
https://lightroom.adobe.com/shares/c65acbd3ff98264bade2e0bf971774da
https://lightroom.adobe.com/shares/45a05e0a96476643b7c72b343216d82e
https://lightroom.adobe.com/shares/d8cccba2b9c7f44191cf978e7b12f2f2
https://lightroom.adobe.com/shares/42ab7c6dd891e9458b26c2edbd9a2370
https://lightroom.adobe.com/shares/ba465c257772e443a977515086b2ac69
https://lightroom.adobe.com/shares/dcc50ae188469b49ad345cec25f89a2b
https://lightroom.adobe.com/shares/3fa0b27dfa2a2d438aaccabcb8145802
https://lightroom.adobe.com/shares/188b34d19e89a54fae028d8c474eba93
https://lightroom.adobe.com/shares/9aee62411f3a604b9452a7924ef3ffa8
https://lightroom.adobe.com/shares/d30f08f7253fdf43b6ea4beb7be42e7f
https://lightroom.adobe.com/shares/5ebfd663f0ccce48baced010c4687434
https://lightroom.adobe.com/shares/3c283e548ab99e409a20b3bdd0bf0341
https://lightroom.adobe.com/shares/975656016f0f344f9c7bf30fb82a5168
https://lightroom.adobe.com/shares/75c6b7d77465794c879d51753a4b993a
https://lightroom.adobe.com/shares/26acf3f13e8fc24c82abc9ee12489f74
https://lightroom.adobe.com/shares/8b46d5ab3625114a9946bf80c749bd32
https://lightroom.adobe.com/shares/5ab0a9b55711d748bde9cab8b3b86db9
https://lightroom.adobe.com/shares/a8b1528ee5d127418847c4d033ac71b9
https://lightroom.adobe.com/shares/5de9e220233dc44aa8502c74af033e88
https://lightroom.adobe.com/shares/e598949795f49c44beee1a247967680a
https://lightroom.adobe.com/shares/46024b65ffabc648ac0f6dede3b92f3d
https://lightroom.adobe.com/shares/27cb464a24a2f64e8c7ebebc23bafe1f
https://lightroom.adobe.com/shares/0b05bbfadcf8c74d80efe32239e1ffe2
https://lightroom.adobe.com/shares/47fa57ee82e43640b4f2f6917fa8e4a8
https://lightroom.adobe.com/shares/51a6892ce1a8fb44ab63af6363b41a78
https://lightroom.adobe.com/shares/ee152713afcf2a42a9bbd3958efaed24
https://lightroom.adobe.com/shares/1ae1cbaff791b943b74467df79b7971c
https://lightroom.adobe.com/shares/d0b98b773860f34a8c5474830f49ac19
https://lightroom.adobe.com/shares/057860d54bf8034dbf7b0b07c18dfe5e
https://lightroom.adobe.com/shares/c80328145391644b8cd0051734dbea75
https://lightroom.adobe.com/shares/09cc7d2b8c26a241b5752da631c10f24
https://lightroom.adobe.com/shares/4c321dbf23b98a4a937524ff6f1fa187
https://lightroom.adobe.com/shares/051cecbadc9d914e956f736220db32a4
https://lightroom.adobe.com/shares/3f223e3ef8010c45a7e7f4ea749f647b
https://lightroom.adobe.com/shares/d2b77d2d56116645ba611bd072cec0ce
https://lightroom.adobe.com/shares/85f22f42208b2149b967332e1d056033
https://lightroom.adobe.com/shares/0c128616a220c844afa499f201b84ca6
https://lightroom.adobe.com/shares/fee38ec981a8ab4a90d96a5dcc34cd05
https://lightroom.adobe.com/shares/e22aee9a9bcf0645bc9f6aea95d30088
https://lightroom.adobe.com/shares/c9f0ff5f247dd84884549c7322337c55
https://lightroom.adobe.com/shares/e6609591f971e449b62ceec33aa19b70
https://lightroom.adobe.com/shares/4dde97c320e11343aac65b1311707397
https://lightroom.adobe.com/shares/c1f1f72fad91aa4dba1f47894efe03d1
https://lightroom.adobe.com/shares/340f30f1aab081409188421e821617ac

固执的向日葵 发表于 昨天 13:42

沙发!沙发!
页: [1]
查看完整版本: 人民大学蓝虹谈以生态信用支持海洋保护