CVE-2017-14175
Summary
| CVE | CVE-2017-14175 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2017-09-07 06:29:00 UTC |
|---|
| Updated | 2020-10-15 16:07:00 UTC |
|---|
| Description | In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| CVE-2017-14175: denial of service (DoS) issue in ReadXBMImage():345 in coders/xbm.c · Issue #712 · ImageMagick/ImageMagick · GitHub |
CONFIRM |
github.com |
Exploit, Issue Tracking, Patch, Third Party Advisory |
| [SECURITY] [DLA 2366-1] imagemagick security update |
MLIST |
lists.debian.org |
Third Party Advisory |
| USN-3681-1: ImageMagick vulnerabilities | Ubuntu security notices |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| [SECURITY] [DLA 1785-1] imagemagick security update |
MLIST |
lists.debian.org |
Third Party Advisory |
| https://github.com/ImageMagick/ImageMagick/issues/712 · ImageMagick/ImageMagick@d9a8234 · GitHub |
CONFIRM |
github.com |
Patch, Vendor Advisory |
| ImageMagick: Multiple vulnerabilities (GLSA 201711-07) — Gentoo security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710460 Gentoo Linux ImageMagick Multiple Vulnerabilities (GLSA 201711-07)
