CVE-2017-9407: Medium severity ImageMagick vulnerability
In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9407?
CVE-2017-9407 is a vulnerability in ImageMagick 7.0.5-5 that allows attackers to cause a denial of service (memory leak) via a crafted file.
How severe is CVE-2017-9407?
CVE-2017-9407 has a severity rating of 6.5 (medium).
Which software versions are affected by CVE-2017-9407?
The affected software versions include ImageMagick 7.0.5-5, 8:6.9.7.4+dfsg-11, 8:6.8.9.9-7ubuntu5.8, 8:6.9.7.4+dfsg-3ubuntu1.2, 8:6.7.7.10-6ubuntu3.8, 8:6.9.10.23+dfsg-2.1+deb10u1, 8:6.9.10.23+dfsg-2.1+deb10u5, 8:6.9.11.60+dfsg-1.3+deb11u1, 8:6.9.11.60+dfsg-1.6, and 8:6.9.12.98+dfsg1-2.
How can I fix CVE-2017-9407?
To fix CVE-2017-9407, update ImageMagick to version 8:6.9.7.4+dfsg-11 or apply the specific remedies provided by Ubuntu or Debian for the affected versions.
Are there any references for CVE-2017-9407?
Yes, you can find references for CVE-2017-9407 at the following links: [1] GitHub: https://github.com/ImageMagick/ImageMagick/issues/459, [2] Launchpad: https://launchpad.net/bugs/cve/CVE-2017-9407, [3] Debian: https://security-tracker.debian.org/tracker/CVE-2017-9407