PT-2017-2967 · Imagemagick+2 · Imagemagick+2

Jgj212

·

Publicado

2017-09-02

·

Atualizado

2019-10-03

·

CVE-2017-14531

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0
Description The issue is related to a memory exhaustion problem in the ReadSUNImage component of ImageMagick, specifically in the coders/sun.c file. This is caused by resource management errors. Exploitation of this issue can allow a remote attacker to cause a denial of service.
Recommendations For ImageMagick version 7.0.7-0, consider restricting access to the ReadSUNImage function in coders/sun.c to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-770CWE-399

Identificadores relacionados

BDU:2017-02292
CVE-2017-14531
OPENSUSE-SU-2017_3420-1
SUSE-SU-2017:3378-1
SUSE-SU-2017:3388-1
USN-3681-1

Produtos afetados

Imagemagick
Suse
Ubuntu