PT-2017-18701 · Imagemagick+4 · Imagemagick+4

Chris Evans · Published 2017-05-19 · Updated 2021-04-28 · CVE-2017-9098

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-2 GraphicsMagick versions prior to 1.3.24

Description The issue allows an attacker to leak sensitive information from process memory space due to the use of uninitialized memory in the RLE decoder. This can be exploited through remote attacks against code in a long-running server process that converts image data on behalf of multiple users. The problem is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.

Recommendations For ImageMagick versions prior to 7.0.5-2, update to version 7.0.5-2 or later. For GraphicsMagick versions prior to 1.3.24, update to version 1.3.24 or later. As a temporary workaround, consider disabling the ReadRLEImage function in coders/rle.c until a patch is available.

Exploit

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

ALT-PU-2017-2096

ALT-PU-2018-2652

CVE-2017-9098

DLA-1456-1

DLA-953-1

DLA-960-1

DSA-3863-1

MGASA-2018-0229

SUSE-SU-2017:1489-1

SUSE-SU-2017:1599-1

SUSE-SU-2017:1600-1

USN-3302-1

Affected Products

Alt Linux

Graphicsmagick

Imagemagick

Suse

Ubuntu

References · 115

• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html · Exploit
• https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849b · Patch
• http://debian.org/security/2017/dsa-3863 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8356 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9142 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0229 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3302-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8348 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9098 · Security Note
• https://ubuntu.com/security/notices/USN-3302-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7942 · Vendor Advisory