CVE-2017-6500: Medium severity ImageMagick ImageMagick vulnerability
Published Mar 6, 2017
·Updated
An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
Affected Software
4 affected componentsFixes available
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.6+deb12u18:6.9.13.12+dfsg1-1
ImageMagick ImageMagick=6.9.7
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:6.9.13.12+dfsg1-1
Event History
Mar 6, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6500?
CVE-2017-6500 has a medium severity level due to its impact on ImageMagick handling of specially crafted sun files.
2
How do I fix CVE-2017-6500?
To fix CVE-2017-6500, update ImageMagick to version 6.9.11.60+dfsg-1.3+deb11u3 or later.
3
Which versions of ImageMagick are affected by CVE-2017-6500?
CVE-2017-6500 affects ImageMagick versions before 6.9.11.60, including 6.9.7.
4
What type of vulnerability is CVE-2017-6500?
CVE-2017-6500 is a heap-based buffer over-read vulnerability.
5
What platforms are impacted by CVE-2017-6500?
CVE-2017-6500 impacts Debian GNU/Linux versions 8.0 and 9.0 running vulnerable ImageMagick versions.