PT-2017-2595 · Imagemagick+2 · Imagemagick+2

Jgj212 · Publicado 2017-06-29 · Atualizado 2020-09-08 · CVE-2017-12140

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is caused by an integer signedness error in the ReadDCMImage function, located in codersdcm.c. This error can be exploited by a remote attacker using a specially crafted DCM file, leading to excessive memory consumption.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the ReadDCMImage function until a patch is available to prevent excessive memory consumption via crafted DCM files. Restrict access to the codersdcm.c module to minimize the risk of exploitation. Avoid using the ReadDCMImage function with untrusted DCM files until the issue is resolved.

Exploit

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-399

CWE-681

CWE-400

Identificadores relacionados

BDU:2017-01811

CVE-2017-12140

DLA-1081-1

DLA-1785-1

DLA-2366-1

OPENSUSE-SU-2017_3270-1

OPENSUSE-SU-2017_3420-1

SUSE-SU-2017:3378-1

SUSE-SU-2017:3388-1

SUSE-SU-2018:0197-1

USN-3681-1

Produtos afetados

Imagemagick

Suse

Ubuntu

Referências · 259

• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/jgj212/poc/blob/master/memory_exhaustion_in_ReadDCMImage · Exploit
• https://github.com/ImageMagick/ImageMagick/issues/533 · Correção
• https://github.com/ImageMagick/ImageMagick/commit/94933146cb2d9d95889a385f08d5eb5f92d4e3cd · Nota
• https://ubuntu.com/security/CVE-2018-8960 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-14625 · Aviso do Fabricante
• https://bugzilla.suse.com/1060176 · Nota
• https://ubuntu.com/security/CVE-2017-12418 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Aviso do Fabricante
• https://bugzilla.suse.com/1049373 · Nota
• https://ubuntu.com/security/CVE-2017-15016 · Aviso do Fabricante
• https://bugzilla.suse.com/1067184 · Nota
• https://bugzilla.suse.com/1050632 · Nota