CVE-2017-11528: Medium severity imagemagick vulnerability
Published Jul 9, 2017
·Updated
The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
56 affected componentsFixes available
debian/imagemagick<=8:6.7.7.10-5+deb7u14, <=8:6.8.9.9-5, <=8:6.8.9.9-5+deb8u8, <=8:6.7.7.10-5+deb7u4, <=8:6.9.7.4+dfsg-11, <=8:6.8.9.9-5+deb8u9
8:6.9.7.4+dfsg-128:6.9.7.4+dfsg-11+deb9u18:6.8.9.9-5+deb8u10
ImageMagick<=6.9.8-10
ImageMagick=7.0.1-0
ImageMagick=7.0.1-1
ImageMagick=7.0.1-2
ImageMagick=7.0.1-3
ImageMagick=7.0.1-4
ImageMagick=7.0.1-5
ImageMagick=7.0.1-6
ImageMagick=7.0.1-7
ImageMagick=7.0.1-8
ImageMagick=7.0.1-9
ImageMagick=7.0.1-10
ImageMagick=7.0.2-0
ImageMagick=7.0.2-1
ImageMagick=7.0.2-2
ImageMagick=7.0.2-3
ImageMagick=7.0.2-4
ImageMagick=7.0.2-5
ImageMagick=7.0.2-6
ImageMagick=7.0.2-7
ImageMagick=7.0.2-8
ImageMagick=7.0.2-9
ImageMagick=7.0.2-10
ImageMagick=7.0.3-0
ImageMagick=7.0.3-1
ImageMagick=7.0.3-2
ImageMagick=7.0.3-3
ImageMagick=7.0.3-4
ImageMagick=7.0.3-5
ImageMagick=7.0.3-6
ImageMagick=7.0.3-7
ImageMagick=7.0.3-8
ImageMagick=7.0.3-9
ImageMagick=7.0.3-10
ImageMagick=7.0.4-0
ImageMagick=7.0.4-1
ImageMagick=7.0.4-2
ImageMagick=7.0.4-3
ImageMagick=7.0.4-4
ImageMagick=7.0.4-5
ImageMagick=7.0.4-6
ImageMagick=7.0.4-7
ImageMagick=7.0.4-8
ImageMagick=7.0.4-9
ImageMagick=7.0.4-10
ImageMagick=7.0.5-0
ImageMagick=7.0.5-1
ImageMagick=7.0.5-4
ImageMagick=7.0.5-5
ImageMagick=7.0.5-6
ImageMagick=7.0.5-7
ImageMagick=7.0.5-8
ImageMagick=7.0.5-9
ImageMagick=7.0.5-10
ImageMagick=7.0.6-0
Remediation
Patch Available
Event History
Jul 23, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11528?
CVE-2017-11528 has been classified as a denial of service vulnerability due to a memory leak.
2
How do I fix CVE-2017-11528?
To mitigate CVE-2017-11528, update ImageMagick to versions 6.9.9-0 or later in the 6.x series, and to 7.0.6-1 or later in the 7.x series.
3
Which versions of ImageMagick are affected by CVE-2017-11528?
ImageMagick versions prior to 6.9.9-0 and 7.x before 7.0.6-1 are affected by CVE-2017-11528.
4
What types of attacks can exploit CVE-2017-11528?
CVE-2017-11528 can be exploited by remote attackers using crafted files to trigger a memory leak.
5
Is CVE-2017-11528 a local or remote vulnerability?
CVE-2017-11528 is a remote vulnerability that can be exploited without local access.