CVE-2017-11188: High severity imagemagick vulnerability
Published Jul 12, 2017
·Updated
Last updated 24 July 2024
Other sources
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
Affected Software
2 affected componentsFixes available
ImageMagick=7.0.6-0
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Patch Available
Event History
Jul 12, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:24 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:18 AM
RemedyDescriptionSeverityAffected Software
Apr 28, 2025
Data Sourced
via Debian·03:32 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-11188?
CVE-2017-11188 is a vulnerability in ImageMagick's ReadDPXImage function that can cause CPU exhaustion via a crafted DPX file.
2
How severe is CVE-2017-11188?
CVE-2017-11188 has a severity rating of 7.5 (high).
3
Which versions of ImageMagick are affected by CVE-2017-11188?
ImageMagick versions 7.0.6-0 and below are affected by CVE-2017-11188.
4
How can I fix CVE-2017-11188?
Update ImageMagick to version 8:6.9.10.23+dfsg-2.1+deb10u1 or higher to fix CVE-2017-11188.
5
Where can I find more information about CVE-2017-11188?
You can find more information about CVE-2017-11188 on the GitHub issue page, SecurityFocus, and Launchpad.