CVE-2017-14607: High severity ImageMagick ImageMagick vulnerability
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to Read ...
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-11+deb9u3Fixed in 8:6.8.9.9-5+deb8u11Fixed in 8:6.9.9.34+dfsg-1 - Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.6+deb12u11Fixed in 8:6.9.11.60+dfsg-1.6+deb12u15Fixed in 8:7.1.1.43+dfsg1-1+deb13u12Fixed in 8:7.1.1.43+dfsg1-1+deb13u13Fixed in 8:7.1.2.34+dfsg1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14607?
The severity of CVE-2017-14607 is high with a severity value of 8.1.
How does CVE-2017-14607 affect ImageMagick?
CVE-2017-14607 affects ImageMagick 7.0.7-4 Q16.
What is the potential impact of CVE-2017-14607?
The potential impact of CVE-2017-14607 is the disclosure of potentially sensitive memory or application crashes.
How can I fix CVE-2017-14607?
To fix CVE-2017-14607, update ImageMagick to versions 8:6.9.7.4+dfsg-11+deb9u3, 8:6.8.9.9-5+deb8u11, 8:6.9.9.34+dfsg-1 or a higher version provided by the vendor.
Where can I find more information about CVE-2017-14607?
More information about CVE-2017-14607 can be found at the following references: http://www.securityfocus.com/bid/100944, https://github.com/ImageMagick/ImageMagick/issues/765, and https://usn.ubuntu.com/3681-1/