PT-2017-3593 · Imagemagick+4 · Imagemagick+4
Henices
·
Published
2017-11-17
·
Updated
2020-09-08
·
CVE-2017-1000476
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ImageMagick version 7.0.7-12 Q16
Description:
A CPU exhaustion issue was found in the
ReadDDSInfo function in coders/dds.c, allowing attackers to cause a denial of service. This issue is related to uncontrolled resource consumption, which can be exploited by a remote attacker to cause a service disruption.Recommendations:
For ImageMagick version 7.0.7-12 Q16, consider disabling the
ReadDDSInfo function in coders/dds.c as a temporary workaround to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Imagemagick
Red Hat
Suse
Ubuntu