PT-2017-2565 · Imagemagick+2 · Imagemagick+2

Jgj212 · Published 2017-07-22 · Updated 2019-10-03 · CVE-2017-11523

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.9-0 through 7.0.6-1 ImageMagick version 7.x

Description The issue is related to the ReadTXTImage function, which does not properly consider the end-of-file condition, allowing remote attackers to cause a denial of service (infinite loop) via a crafted file. This is due to insufficient checking of the end-of-file marker.

Recommendations For ImageMagick versions 6.9.9-0 through 7.0.6-1, consider disabling the ReadTXTImage function until a patch is available. For ImageMagick version 7.x, consider disabling the ReadTXTImage function until a patch is available.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-399

CWE-835

Related Identifiers

ALT-PU-2017-2096

BDU:2017-01777

CVE-2017-11523

DLA-1081-1

DLA-1785-1

DSA-4019-1

MGASA-2018-0229

OPENSUSE-SU-2017_3420-1

SUSE-SU-2017:3388-1

Affected Products

Alt Linux

Imagemagick

Suse

References · 320

• 🔥 https://github.com/ImageMagick/ImageMagick/issues/591 · Exploit
• 🔥 https://bugs.debian.org/869210 · Exploit
• https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13768 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13139 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15017 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0229 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02040 · Security Note
• https://bdu.fstec.ru/vul/2017-01828 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14172 · Security Note
• https://bdu.fstec.ru/vul/2017-01778 · Security Note
• https://bdu.fstec.ru/vul/2021-03373 · Security Note
• https://bdu.fstec.ru/vul/2017-01800 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12640 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13658 · Security Note