CVE-2017-14341: High severity imagemagick vulnerability
ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in ...
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-14341?
CVE-2017-14341 is a vulnerability in ImageMagick 7.0.6-6 that allows for CPU exhaustion via a crafted wpg image file.
How severe is CVE-2017-14341?
CVE-2017-14341 has a severity rating of high (6.5).
Which software versions are affected by CVE-2017-14341?
ImageMagick 7.0.6-6, ImageMagick 6.9.9.34+dfsg-3, ImageMagick 6.8.9.9-7ubuntu5.11, ImageMagick 6.9.7.4+dfsg-16ubuntu2.2, ImageMagick 6.9.7.4+dfsg-16ubuntu6.2, and ImageMagick 6.7.7.10-6ubuntu3.11 are affected.
How do I fix CVE-2017-14341?
Upgrade to ImageMagick version 6.9.10.23+dfsg-2.1+deb10u1, 6.9.10.23+dfsg-2.1+deb10u5, 6.9.11.60+dfsg-1.3+deb11u1, 6.9.11.60+dfsg-1.6, or 6.9.12.98+dfsg1-2 to fix CVE-2017-14341.
Where can I find more information about CVE-2017-14341?
More information can be found at the following references: [GitHub Issue](https://github.com/ImageMagick/ImageMagick/issues/654), [Ubuntu Advisory](https://usn.ubuntu.com/3681-1/), [Debian Advisory](https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html).