CVE-2017-8356: Medium severity imagemagick vulnerability
Published Apr 30, 2017
·Updated
In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
3 affected components
ImageMagick ImageMagick=7.0.5-5
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Apr 30, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8356?
CVE-2017-8356 has a severity classification that indicates a denial of service due to a memory leak.
2
How do I fix CVE-2017-8356?
To mitigate CVE-2017-8356, upgrade ImageMagick to a version later than 7.0.5-5 that addresses this vulnerability.
3
What are the impacts of CVE-2017-8356?
CVE-2017-8356 can lead to a denial of service which may result in application crashes due to memory leaks.
4
Which software versions are affected by CVE-2017-8356?
CVE-2017-8356 affects ImageMagick version 7.0.5-5 along with specific versions of Debian GNU/Linux.
5
How can attackers exploit CVE-2017-8356?
Attackers can exploit CVE-2017-8356 by using a crafted SUN image file to trigger memory leakage.