CVE-2017-13143: Infoleak
Published Jul 28, 2017
·Updated
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage ...
Affected Software
42 affected componentsFixes available
debian/imagemagick<=8:6.7.7.10-5+deb7u14, <=8:6.8.9.9-5+deb8u9, <=8:6.8.9.9-5, <=8:6.8.9.9-5+deb8u8, <=8:6.9.7.4+dfsg-13
ImageMagick<=6.9.7-5
ImageMagick=7.0.1-0
ImageMagick=7.0.1-1
ImageMagick=7.0.1-2
ImageMagick=7.0.1-3
ImageMagick=7.0.1-4
ImageMagick=7.0.1-5
ImageMagick=7.0.1-6
ImageMagick=7.0.1-7
ImageMagick=7.0.1-8
ImageMagick=7.0.1-9
ImageMagick=7.0.1-10
ImageMagick=7.0.2-0
ImageMagick=7.0.2-1
ImageMagick=7.0.2-2
ImageMagick=7.0.2-3
ImageMagick=7.0.2-4
ImageMagick=7.0.2-5
ImageMagick=7.0.2-6
ImageMagick=7.0.2-7
ImageMagick=7.0.2-8
ImageMagick=7.0.2-9
ImageMagick=7.0.2-10
ImageMagick=7.0.3-0
ImageMagick=7.0.3-1
ImageMagick=7.0.3-2
ImageMagick=7.0.3-3
ImageMagick=7.0.3-4
ImageMagick=7.0.3-5
ImageMagick=7.0.3-6
ImageMagick=7.0.3-7
ImageMagick=7.0.3-8
ImageMagick=7.0.3-9
ImageMagick=7.0.3-10
ImageMagick=7.0.4-0
ImageMagick=7.0.4-1
ImageMagick=7.0.4-2
ImageMagick=7.0.4-3
ImageMagick=7.0.4-4
ImageMagick=7.0.4-5
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Patch Available
Event History
Aug 23, 2017
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:28 PM
Description
Sep 19, 2024
Data Sourced
via Ubuntu·10:46 PM
RemedyDescriptionSeverityAffected Software
Feb 27, 2025
Data Sourced
via Debian·12:01 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-13143?
CVE-2017-13143 is a vulnerability in ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6 that allows attackers to obtain sensitive information from process memory.
2
What is the severity of CVE-2017-13143?
The severity of CVE-2017-13143 is high, with a severity value of 7.5.
3
How does CVE-2017-13143 affect ImageMagick?
CVE-2017-13143 affects ImageMagick versions before 6.9.7-6 and 7.x before 7.0.4-6.
4
How can I fix CVE-2017-13143?
To fix CVE-2017-13143, update ImageMagick to version 6.9.7-6 or 7.x to version 7.0.4-6 or later.
5
Are there any additional references for CVE-2017-13143?
Yes, you can find more information about CVE-2017-13143 in the Debian bug report and the GitHub references provided.