CVE-2017-5507: High severity ImageMagick ImageMagick vulnerability
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.7.4+dfsg-1Fixed in 8:6.8.9.9-5+deb8u7 - Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:6.9.13.12+dfsg1-1Fixed in 8:7.1.1.39+dfsg1-2
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5507?
CVE-2017-5507 has a severity rating that allows for remote denial of service due to memory consumption.
How do I fix CVE-2017-5507?
To fix CVE-2017-5507, you should upgrade to ImageMagick version 6.9.7-4 or higher, or 7.0.4-4 or higher.
What versions of ImageMagick are affected by CVE-2017-5507?
CVE-2017-5507 affects ImageMagick versions before 6.9.7-4 and 7.x before 7.0.4-4.
Can CVE-2017-5507 be exploited by attackers?
Yes, CVE-2017-5507 can be exploited by remote attackers to cause a denial of service.
What is the impact of CVE-2017-5507 on systems running ImageMagick?
The impact of CVE-2017-5507 on systems running ImageMagick is increased memory consumption leading to potential service outages.