CVE-2017-18210: Null Pointer Dereference
Published Mar 1, 2018
·Updated
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.
Affected Software
26 affected components
ImageMagick=7.0.7-0
ImageMagick=7.0.7-1
ImageMagick=7.0.7-2
ImageMagick=7.0.7-3
ImageMagick=7.0.7-4
ImageMagick=7.0.7-5
ImageMagick=7.0.7-6
ImageMagick=7.0.7-8
ImageMagick=7.0.7-9
ImageMagick=7.0.7-10
ImageMagick=7.0.7-11
ImageMagick=7.0.7-12
ImageMagick=7.0.7-13
ImageMagick=7.0.7-14
ImageMagick=7.0.7-15
ImageMagick=7.0.7-16
ImageMagick=7.0.7-17
ImageMagick=7.0.7-18
ImageMagick=7.0.7-19
ImageMagick=7.0.7-20
ImageMagick=7.0.7-21
ImageMagick=7.0.7-22
ImageMagick=7.0.7-23
ImageMagick=7.0.7-24
ImageMagick=7.0.7-25
ImageMagick=7.0.7.7
Remediation
Patch Available
Event History
Mar 1, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18210?
CVE-2017-18210 has a severity rating that indicates a potential denial of service due to a NULL pointer dereference.
2
How do I fix CVE-2017-18210?
To fix CVE-2017-18210, upgrade ImageMagick to the latest version where the vulnerability has been addressed.
3
Which versions of ImageMagick are affected by CVE-2017-18210?
CVE-2017-18210 affects all versions of ImageMagick starting from 7.0.7 up to 7.0.7.7.
4
What is the impact of CVE-2017-18210?
The impact of CVE-2017-18210 may allow attackers to cause a denial of service through memory allocation issues.
5
Is CVE-2017-18210 exploitable?
Yes, CVE-2017-18210 can be exploited if an attacker sends crafted input to the ImageMagick software.