CVE-2017-11523: High severity imagemagick vulnerability
Published Jul 22, 2017
·Updated
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9 ...
Affected Software
55 affected componentsFixes available
ImageMagick<=6.9.9-0
ImageMagick=7.0.0-0
ImageMagick=7.0.1-0
ImageMagick=7.0.1-1
ImageMagick=7.0.1-2
ImageMagick=7.0.1-3
ImageMagick=7.0.1-4
ImageMagick=7.0.1-5
ImageMagick=7.0.1-6
ImageMagick=7.0.1-7
ImageMagick=7.0.1-8
ImageMagick=7.0.1-9
ImageMagick=7.0.1-10
ImageMagick=7.0.2-0
ImageMagick=7.0.2-1
ImageMagick=7.0.2-2
ImageMagick=7.0.2-3
ImageMagick=7.0.2-4
ImageMagick=7.0.2-5
ImageMagick=7.0.2-6
ImageMagick=7.0.2-7
ImageMagick=7.0.2-8
ImageMagick=7.0.2-9
ImageMagick=7.0.2-10
ImageMagick=7.0.3-0
ImageMagick=7.0.3-1
ImageMagick=7.0.3-2
ImageMagick=7.0.3-3
ImageMagick=7.0.3-4
ImageMagick=7.0.3-5
ImageMagick=7.0.3-6
ImageMagick=7.0.3-7
ImageMagick=7.0.3-8
ImageMagick=7.0.3-9
ImageMagick=7.0.3-10
ImageMagick=7.0.4-0
ImageMagick=7.0.4-1
ImageMagick=7.0.4-2
ImageMagick=7.0.4-3
ImageMagick=7.0.4-4
ImageMagick=7.0.4-5
ImageMagick=7.0.4-6
ImageMagick=7.0.4-7
ImageMagick=7.0.4-8
ImageMagick=7.0.4-9
ImageMagick=7.0.4-10
ImageMagick=7.0.5-0
ImageMagick=7.0.5-1
ImageMagick=7.0.5-4
ImageMagick=7.0.5-5
ImageMagick=7.0.5-6
ImageMagick=7.0.5-7
ImageMagick=7.0.5-8
ImageMagick=7.0.6-1
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Patch Available
Event History
Jul 22, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Apr 27, 2025
Data Sourced
via Debian·11:47 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-11523?
CVE-2017-11523 has been classified as a denial of service vulnerability due to the potential for an infinite loop.
2
How do I fix CVE-2017-11523?
To fix CVE-2017-11523, update ImageMagick to versions 6.9.11.60 or 7.1.1.43 or newer as they include patches for this vulnerability.
3
Which versions of ImageMagick are affected by CVE-2017-11523?
CVE-2017-11523 affects ImageMagick versions up to 6.9.9-0 and 7.x through 7.0.6-1.
4
What kind of attack does CVE-2017-11523 facilitate?
CVE-2017-11523 allows remote attackers to perform denial of service attacks via specially crafted TXT files.
5
Is CVE-2017-11523 a high-risk vulnerability?
Yes, CVE-2017-11523 is considered high-risk as it can lead to service interruptions due to the infinite loop.