CVE-2017-10800: Medium severity GraphicsMagick Graphicsmagick vulnerability
When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.26-r0 - Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1Fixed in 1.4+really1.3.49-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10800?
CVE-2017-10800 has a high severity due to its potential to cause denial of service through out-of-memory conditions.
How do I fix CVE-2017-10800?
To fix CVE-2017-10800, upgrade GraphicsMagick to a version that is greater than or equal to 1.3.36.
Which versions of GraphicsMagick are affected by CVE-2017-10800?
GraphicsMagick version 1.3.25 is affected by CVE-2017-10800.
What issues can arise from CVE-2017-10800?
CVE-2017-10800 can lead to a denial of service condition due to out-of-memory errors when processing certain MATLAB images.
Is CVE-2017-10800 exploitable remotely?
CVE-2017-10800 is considered to be exploitable remotely if the vulnerable software is exposed to untrusted input.