PT-2017-2561 · Imagemagick+2 · Imagemagick+2

Jgj212

·

Publicado

2017-07-18

·

Atualizado

2018-03-22

·

CVE-2017-11530

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.9-0 and earlier ImageMagick versions 7.x through 7.0.6-0
Description The issue is related to the ReadEPTImage function, which allows remote attackers to cause a denial of service due to memory consumption via a crafted file. This can lead to an uncontrolled resource expenditure, enabling a remote attacker to initiate a denial of service by exploiting the vulnerability with a specially formed file.
Recommendations For ImageMagick versions 6.9.9-0 and earlier, update to version 6.9.9-1 or later. For ImageMagick versions 7.x through 7.0.6-0, update to version 7.0.6-1 or later.

Correção

DoS

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALT-PU-2017-2096
BDU:2017-01773
CVE-2017-11530
DLA-1081-1
DSA-3914-1
SUSE-SU-2018:0581-1
SUSE-SU-2018:0770-1

Produtos afetados

Alt Linux
Imagemagick
Suse