CVE-2017-13139: Critical severity imagemagick vulnerability
Published Jul 29, 2017
·Updated
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGIm ...
Affected Software
65 affected componentsFixes available
debian/imagemagick<=8:6.8.9.9-5+deb8u8, <=8:6.7.7.10-5+deb9u1, <=8:6.7.7.10-5+deb7u14, <=8:6.9.7.4+dfsg-13, <=8:6.8.9.9-5+deb8u9
ImageMagick ImageMagick<=6.9.9-0
ImageMagick ImageMagick=7.0.0-0
ImageMagick ImageMagick=7.0.1-0
ImageMagick ImageMagick=7.0.1-1
ImageMagick ImageMagick=7.0.1-2
ImageMagick ImageMagick=7.0.1-3
ImageMagick ImageMagick=7.0.1-4
ImageMagick ImageMagick=7.0.1-5
ImageMagick ImageMagick=7.0.1-6
ImageMagick ImageMagick=7.0.1-7
ImageMagick ImageMagick=7.0.1-8
ImageMagick ImageMagick=7.0.1-9
ImageMagick ImageMagick=7.0.1-10
ImageMagick ImageMagick=7.0.2-0
ImageMagick ImageMagick=7.0.2-1
ImageMagick ImageMagick=7.0.2-2
ImageMagick ImageMagick=7.0.2-3
ImageMagick ImageMagick=7.0.2-4
ImageMagick ImageMagick=7.0.2-5
ImageMagick ImageMagick=7.0.2-6
ImageMagick ImageMagick=7.0.2-7
ImageMagick ImageMagick=7.0.2-8
ImageMagick ImageMagick=7.0.2-9
ImageMagick ImageMagick=7.0.2-10
ImageMagick ImageMagick=7.0.3-0
ImageMagick ImageMagick=7.0.3-1
ImageMagick ImageMagick=7.0.3-2
ImageMagick ImageMagick=7.0.3-3
ImageMagick ImageMagick=7.0.3-4
ImageMagick ImageMagick=7.0.3-5
ImageMagick ImageMagick=7.0.3-6
ImageMagick ImageMagick=7.0.3-7
ImageMagick ImageMagick=7.0.3-8
ImageMagick ImageMagick=7.0.3-9
ImageMagick ImageMagick=7.0.3-10
ImageMagick ImageMagick=7.0.4-0
ImageMagick ImageMagick=7.0.4-1
ImageMagick ImageMagick=7.0.4-2
ImageMagick ImageMagick=7.0.4-3
ImageMagick ImageMagick=7.0.4-4
ImageMagick ImageMagick=7.0.4-5
ImageMagick ImageMagick=7.0.4-6
ImageMagick ImageMagick=7.0.4-7
ImageMagick ImageMagick=7.0.4-8
ImageMagick ImageMagick=7.0.4-9
ImageMagick ImageMagick=7.0.4-10
ImageMagick ImageMagick=7.0.5-0
ImageMagick ImageMagick=7.0.5-1
ImageMagick ImageMagick=7.0.5-2
ImageMagick ImageMagick=7.0.5-3
ImageMagick ImageMagick=7.0.5-4
ImageMagick ImageMagick=7.0.5-5
ImageMagick ImageMagick=7.0.5-6
ImageMagick ImageMagick=7.0.5-7
ImageMagick ImageMagick=7.0.5-8
ImageMagick ImageMagick=7.0.5-10
ImageMagick ImageMagick=7.0.6-0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
Canonical Ubuntu Linux=18.04
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Event History
Aug 23, 2017
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:29 PM
Description
Sep 15, 2024
Data Sourced
via Ubuntu·10:46 PM
RemedyDescriptionSeverityAffected Software
Apr 27, 2025
Data Sourced
via Debian·11:47 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-13139?
CVE-2017-13139 has a high severity rating due to its potential for out-of-bounds read vulnerabilities.
2
How do I fix CVE-2017-13139?
To fix CVE-2017-13139, update ImageMagick to version 7.0.6-1 or later.
3
What versions of ImageMagick are affected by CVE-2017-13139?
CVE-2017-13139 affects ImageMagick versions before 6.9.9-0 and 7.x before 7.0.6-1.
4
Is CVE-2017-13139 exploitable in all ImageMagick installations?
CVE-2017-13139 may be exploitable depending on how ImageMagick is used and what types of image files are processed.
5
What systems should be updated to mitigate CVE-2017-13139?
Systems running vulnerable versions of ImageMagick on Debian or Ubuntu should be updated to mitigate CVE-2017-13139.