CVE-2017-6499: Medium severity ImageMagick ImageMagick vulnerability
Published Mar 6, 2017
·Updated
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).
Affected Software
4 affected componentsFixes available
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.6+deb12u18:6.9.13.12+dfsg1-1
ImageMagick ImageMagick=6.9.7
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:6.9.13.12+dfsg1-1
Event History
Mar 6, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6499?
CVE-2017-6499 has a severity rating that indicates it can lead to a denial of service through memory leaks.
2
How do I fix CVE-2017-6499?
To fix CVE-2017-6499, update ImageMagick to version 6.9.11.60+dfsg-1.3+deb11u3 or later.
3
Which versions of ImageMagick are affected by CVE-2017-6499?
ImageMagick version 6.9.7 is affected by CVE-2017-6499.
4
What type of vulnerability is CVE-2017-6499?
CVE-2017-6499 is a memory leak vulnerability that can lead to denial of service.
5
Is CVE-2017-6499 specific to any operating system?
CVE-2017-6499 affects ImageMagick on Debian GNU/Linux systems among others.