CVE-2017-13775: Medium severity GraphicsMagick Graphicsmagick vulnerability
GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.26-r3 - Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1Fixed in 1.4+really1.3.49-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13775?
The severity of CVE-2017-13775 is high with a severity value of 6.5.
Which software versions are affected by CVE-2017-13775?
GraphicsMagick 1.3.26 is affected by CVE-2017-13775.
How can CVE-2017-13775 be exploited?
CVE-2017-13775 can be exploited by specially crafted JNX files, which can cause high CPU and memory resource consumption.
Is there a fix available for CVE-2017-13775?
Yes, there are fixes available for CVE-2017-13775. Please refer to the official sources for remediation steps.
Where can I find more information about CVE-2017-13775?
You can find more information about CVE-2017-13775 on the provided references: http://openwall.com/lists/oss-security/2017/08/31/3, http://hg.code.sf.net/p/graphicsmagick/code/rev/b037d79b6ccd, http://www.securityfocus.com/bid/100570