CVE-2017-12640: High severity ImageMagick ImageMagick vulnerability
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOne ...
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.6+deb12u11Fixed in 8:6.9.11.60+dfsg-1.6+deb12u15Fixed in 8:7.1.1.43+dfsg1-1+deb13u12Fixed in 8:7.1.1.43+dfsg1-1+deb13u13Fixed in 8:7.1.2.34+dfsg1-1
Event History
Frequently Asked Questions
What is CVE-2017-12640?
CVE-2017-12640 is an out-of-bounds read vulnerability in ImageMagick 7.0.6-1.
How severe is CVE-2017-12640?
CVE-2017-12640 has a severity value of 8.8, which is considered high.
Which software versions are affected by CVE-2017-12640?
ImageMagick 7.0.6-1 is affected by CVE-2017-12640.
How can I fix CVE-2017-12640?
There is no available remedy for CVE-2017-12640. Consider updating to a patched version of ImageMagick.
Where can I find more information about CVE-2017-12640?
More information about CVE-2017-12640 can be found at the following references: [Link 1](https://github.com/ImageMagick/ImageMagick/issues/542), [Link 2](http://www.securityfocus.com/bid/100155), [Link 3](https://www.debian.org/security/2017/dsa-4019).