PT-2017-2595 · Imagemagick+2 · Imagemagick+2

Jgj212 · Published 2017-06-29 · Updated 2020-09-08 · CVE-2017-12140

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is caused by an integer signedness error in the ReadDCMImage function, located in codersdcm.c. This error can be exploited by a remote attacker using a specially crafted DCM file, leading to excessive memory consumption.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the ReadDCMImage function until a patch is available to prevent excessive memory consumption via crafted DCM files. Restrict access to the codersdcm.c module to minimize the risk of exploitation. Avoid using the ReadDCMImage function with untrusted DCM files until the issue is resolved.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-399

CWE-681

CWE-400

Related Identifiers

BDU:2017-01811

CVE-2017-12140

DLA-1081-1

DLA-1785-1

DLA-2366-1

OPENSUSE-SU-2017_3270-1

OPENSUSE-SU-2017_3420-1

SUSE-SU-2017:3378-1

SUSE-SU-2017:3388-1

SUSE-SU-2018:0197-1

USN-3681-1

Affected Products

Imagemagick

Suse

Ubuntu

References · 259

• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/jgj212/poc/blob/master/memory_exhaustion_in_ReadDCMImage · Exploit
• https://github.com/ImageMagick/ImageMagick/issues/533 · Patch
• https://ubuntu.com/security/CVE-2018-8960 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14625 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12418 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-13060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12432 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10804 · Vendor Advisory