CVE-2017-8349: Medium severity imagemagick vulnerability
Published Apr 30, 2017
·Updated
In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
3 affected components
ImageMagick ImageMagick=7.0.5-5
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Apr 30, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8349?
CVE-2017-8349 has a severity rating classified as high due to the potential for denial of service via a memory leak.
2
How do I fix CVE-2017-8349?
To fix CVE-2017-8349, update ImageMagick to a version later than 7.0.5-5 that addresses the vulnerability.
3
Which versions of ImageMagick are affected by CVE-2017-8349?
ImageMagick version 7.0.5-5 is specifically affected by CVE-2017-8349.
4
Can CVE-2017-8349 be exploited remotely?
Yes, CVE-2017-8349 can be exploited remotely through the use of a crafted file.
5
What software is vulnerable due to CVE-2017-8349?
The vulnerable software includes ImageMagick 7.0.5-5 and certain versions of Debian GNU/Linux that utilize this version.