CVE-2017-17680: Medium severity ImageMagick vulnerability
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-17680?
CVE-2017-17680 is a memory leak vulnerability found in ImageMagick 7.0.7-12 Q16 in the function ReadXPMImage in coders/xpm.c.
How does CVE-2017-17680 affect ImageMagick?
CVE-2017-17680 allows attackers to cause a denial of service in ImageMagick by exploiting a memory leak vulnerability in the function ReadXPMImage in coders/xpm.c.
What is the severity of CVE-2017-17680?
The severity of CVE-2017-17680 is medium, with a severity value of 6.5.
How can I fix CVE-2017-17680 in ImageMagick?
To fix CVE-2017-17680 in ImageMagick, update to version 8:6.9.7.4+dfsg-16ubuntu2.2, 8:6.9.7.4+dfsg-16ubuntu6.2, 8:6.7.7.10-6ubuntu3.11, 8:6.9.9.34+dfsg-3, or 8:6.8.9.9-7ubuntu5.11 depending on your Ubuntu version, or apply the appropriate update for your Debian version.
Where can I find more information about CVE-2017-17680?
You can find more information about CVE-2017-17680 at the following references: https://github.com/ImageMagick/ImageMagick/issues/873, http://www.securityfocus.com/bid/102203, and https://usn.ubuntu.com/3681-1/.