CVE-2014-8561: Medium severity ImageMagick ImageMagick vulnerability
Published Dec 15, 2019
·Updated
imagemagick 6.8.9.6 has remote DOS via infinite loop
Affected Software
5 affected componentsFixes available
ImageMagick ImageMagick=6.8.9-6
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u98:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.2.13+dfsg1-1
Remediation
Patch Available
Event History
Dec 15, 2019
CVE Published
via MITRE·09:34 PM
Data Sourced
via MITRE·09:34 PM
Description
Feb 18, 2026
Data Sourced
via Debian·08:48 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-8561?
CVE-2014-8561 is classified as a remote denial-of-service vulnerability.
2
How do I fix CVE-2014-8561?
To fix CVE-2014-8561, update ImageMagick to a version that is 6.9.11.60 or higher as provided by the latest Debian packages.
3
What versions of ImageMagick are affected by CVE-2014-8561?
CVE-2014-8561 affects ImageMagick version 6.8.9-6.
4
Can CVE-2014-8561 cause unwanted server behavior?
Yes, CVE-2014-8561 can lead to an infinite loop thereby causing a remote denial-of-service condition.
5
Is CVE-2014-8561 specific to any operating system?
CVE-2014-8561 primarily affects Debian Linux versions 8.0, 9.0, and 10.0 with the vulnerable ImageMagick installed.