CVE-2017-9098
First published: Fri May 19 2017(Updated: )
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ImageMagick | <6.9.8-1 | |
| ImageMagick | >=7.0.0-0<7.0.5-2 | |
| ImageMagick | <1.3.24 | |
| Debian Linux | =8.0 | |
| Debian Linux | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.c
- http://www.debian.org/security/2017/dsa-3863
- http://www.securityfocus.com/bid/98593
- https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849b
- https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
- https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html
Frequently Asked Questions
What is the severity of CVE-2017-9098?
CVE-2017-9098 is classified as a high-severity vulnerability due to its potential to leak sensitive information.
How do I fix CVE-2017-9098?
To fix CVE-2017-9098, upgrade ImageMagick to version 7.0.5-2 or later, or GraphicsMagick to version 1.3.24 or later.
What types of software are affected by CVE-2017-9098?
CVE-2017-9098 affects ImageMagick versions prior to 7.0.5-2 and GraphicsMagick versions prior to 1.3.24.
Can CVE-2017-9098 be exploited remotely?
Yes, CVE-2017-9098 can potentially be exploited remotely through a long-running server process that converts image data.
What is the main issue caused by CVE-2017-9098?
The main issue caused by CVE-2017-9098 is the use of uninitialized memory in the RLE decoder, which allows sensitive information leakage.
- agent/references
- agent/type
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/imagemagick
- canonical/imagemagick
- version/imagemagick/7.0.0-0
- vendor/graphicsmagick
- vendor/debian
- canonical/debian linux
- version/debian linux/8.0
- version/debian linux/9.0