CVE-2017-14165: Buffer Overflow
Last updated 24 July 2024
Other sources
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.36+hg16481-2+deb11u1Fixed in 1.4+really1.3.40-4Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1 - Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.26-r5
Event History
Frequently Asked Questions
What is CVE-2017-14165?
CVE-2017-14165 is a vulnerability in GraphicsMagick 1.3.26 that allows for remote denial of service through excessive memory allocation.
How severe is CVE-2017-14165?
CVE-2017-14165 has a severity score of 6.5 out of 10.
How does CVE-2017-14165 impact GraphicsMagick?
CVE-2017-14165 can lead to remote denial of service in the MagickMalloc function in magick/memory.c.
What is the remedy for CVE-2017-14165 in Debian?
The recommended remedy for CVE-2017-14165 in Debian is to upgrade to GraphicsMagick versions 1.4+really1.3.35-1~deb10u2, 1.4+really1.3.35-1~deb10u3, 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, or 1.4+really1.3.42-1.
What is the remedy for CVE-2017-14165 in Ubuntu?
The recommended remedy for CVE-2017-14165 in Ubuntu is to upgrade to GraphicsMagick version 1.3.18-1ubuntu3.1+ for Trusty or 1.3.23-1ubuntu0.4 for Xenial.