CVE-2017-9409: Medium severity imagemagick vulnerability
In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9409?
CVE-2017-9409 is a vulnerability in ImageMagick 7.0.5-5 that allows attackers to cause a denial of service (memory leak) via a crafted file.
Which software versions are affected by CVE-2017-9409?
The affected versions include ImageMagick 7.0.5-5, 6.9.7.4+dfsg-11, 6.8.9.9-7ubuntu5.8, 6.9.7.4+dfsg-3ubuntu1.2, 6.7.7.10-6ubuntu3.8, 7.0.5-5, 6.9.10.23+dfsg-2.1+deb10u1, 6.9.10.23+dfsg-2.1+deb10u5, 6.9.11.60+dfsg-1.3+deb11u1, 6.9.11.60+dfsg-1.6, and 6.9.12.98+dfsg1-2.
How severe is the vulnerability?
The severity of CVE-2017-9409 is medium with a severity score of 6.5.
How can I fix CVE-2017-9409?
To fix CVE-2017-9409, you should update ImageMagick to version 8:6.9.7.4+dfsg-11 or apply the recommended patches for your specific distribution.
Where can I find more information about CVE-2017-9409?
You can find more information about CVE-2017-9409 on GitHub, Launchpad, and Debian Security Tracker.