CVE-2017-18211: Null Pointer Dereference
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was fou ...
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u5Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:7.1.1.43+dfsg1-1Fixed in 8:7.1.1.47+dfsg1-1
Event History
Frequently Asked Questions
What is CVE-2017-18211?
CVE-2017-18211 is a NULL pointer dereference vulnerability in ImageMagick 7.0.7.
What is the severity of CVE-2017-18211?
CVE-2017-18211 has a severity rating of 9.8, which is classified as critical.
How does CVE-2017-18211 affect ImageMagick?
CVE-2017-18211 affects ImageMagick 7.0.7 by causing a NULL pointer dereference in the function saveBinaryCLProgram in magick/opencl.c.
How can I fix CVE-2017-18211?
To fix CVE-2017-18211, update ImageMagick to version 8:6.9.9.34+dfsg-3 or later.
Where can I find more information about CVE-2017-18211?
You can find more information about CVE-2017-18211 at the following references: [GitHub](https://github.com/ImageMagick/ImageMagick/issues/792), [SecurityFocus](http://www.securityfocus.com/bid/103220), [Ubuntu Security Notice](https://usn.ubuntu.com/3681-1/).