CVE-2017-11170: High severity imagemagick vulnerability
Last updated 24 July 2024
Other sources
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-11170?
CVE-2017-11170 is a memory leak vulnerability in the ReadTGAImage function of ImageMagick 7.0.5-6.
How does CVE-2017-11170 impact ImageMagick?
CVE-2017-11170 can cause memory exhaustion in ImageMagick due to invalid colors data in the header of a TGA or VST file.
What is the severity of CVE-2017-11170?
CVE-2017-11170 has a severity rating of 8.8 (high).
How do I fix CVE-2017-11170 in Ubuntu?
For Ubuntu, you can fix CVE-2017-11170 by updating ImageMagick to version 8:6.7.7.10-6ubuntu3.8, 8:6.9.7.4+dfsg-12, 8:6.8.9.9-7ubuntu5.8, or 8:6.9.7.4+dfsg-3ubuntu1.2.
How do I fix CVE-2017-11170 in Debian?
For Debian, you can fix CVE-2017-11170 by updating ImageMagick to version 8:6.9.10.23+dfsg-2.1+deb10u1, 8:6.9.10.23+dfsg-2.1+deb10u5, 8:6.9.11.60+dfsg-1.3+deb11u1, 8:6.9.11.60+dfsg-1.6, or 8:6.9.12.98+dfsg1-2.