PT-2017-2810 · Imagemagick+2 · Imagemagick+2

Shqking + 2 · Published 2017-08-31 · Updated 2020-10-15 · CVE-2017-14175

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Q16

Description The issue is related to a lack of an EOF (End of File) check in the ReadXBMImage() function, which can cause huge CPU consumption. This occurs when a crafted XBM file with large rows and columns fields in the header but insufficient backing data is provided, leading to a loop over the rows that consumes significant CPU resources.

Recommendations For ImageMagick version 7.0.6-1 Q16, consider disabling the ReadXBMImage() function until a patch is available to prevent potential denial of service attacks. Restrict access to XBM files to minimize the risk of exploitation. Avoid using the ReadXBMImage() function with untrusted input files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-399

CWE-834

Related Identifiers

BDU:2017-02082

CVE-2017-14175

DLA-1131-1

DLA-1785-1

DLA-2366-1

OPENSUSE-SU-2017_3420-1

SUSE-SU-2017:3378-1

SUSE-SU-2017:3388-1

USN-3681-1

Affected Products

Imagemagick

Suse

Ubuntu

References · 219

• 🔥 https://github.com/ImageMagick/ImageMagick/issues/712 · Exploit
• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• https://github.com/ImageMagick/ImageMagick/commit/d9a8234d211da30baf9526fbebe9a8438ea7e11c · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8960 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14625 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12418 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-13060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12432 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10804 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12875 · Vendor Advisory