CVE-2017-13736: Medium severity GraphicsMagick Graphicsmagick vulnerability
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.27-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13736?
CVE-2017-13736 is classified as a high severity vulnerability due to its potential for causing remote denial of service attacks.
How do I fix CVE-2017-13736?
To fix CVE-2017-13736, upgrade to GraphicsMagick version 1.3.27 or later, which addresses the memory leak issues.
What software is affected by CVE-2017-13736?
CVE-2017-13736 specifically affects GraphicsMagick version 1.3.26.
What could happen if CVE-2017-13736 is exploited?
Exploitation of CVE-2017-13736 could lead to memory leaks resulting in a remote denial of service, causing application crashes.
Is there a patch available for CVE-2017-13736?
Yes, a patch is available with the release of GraphicsMagick version 1.3.27 which resolves the issues related to CVE-2017-13736.