CVE-2017-14139
published 2017-09-04CVE-2017-14139: ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
PriorityP419medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
EPSS
1.31%
67.6th percentile
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | imagemagick | < imagemagick 8:6.9.9.34+dfsg-3 (bookworm) | imagemagick 8:6.9.9.34+dfsg-3 (bookworm) |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | >= 0 < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| imagemagick | imagemagick | >= 0 < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| imagemagick | imagemagick | >= 0 < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| imagemagick | imagemagick | >= 0 < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
vendor_redhat·2017-09-05·CVSS 6.5
CVE-2017-14139 [MEDIUM] CWE-119 GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
Package: ImageMagick (Red Hat Enterprise Linux 5) - Will not fix
Package: ImageMagick (Red Hat Enterprise Linux 6) - Will not fix
Package: ImageMagick (Red Hat Enterprise Linux 7) - Will not fix
Package: ImageMagick (Red Hat OpenShift Enterprise 2) - Will not fix
Debian
CVE-2017-14139: imagemagick - ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/m...
vendor_debian·2017·CVSS 6.5
CVE-2017-14139 [MEDIUM] CVE-2017-14139: imagemagick - ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/m...
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
Scope: local
bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3)
bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3)
forky: resolved (fixed in 8:6.9.9.34+dfsg-3)
sid: resolved (fixed in 8:6.9.9.34+dfsg-3)
trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)
GHSA
GHSA-63rc-wphj-jr2w: ImageMagick 7
ghsa_unreviewed·2022-05-13
CVE-2017-14139 [MEDIUM] CWE-772 GHSA-63rc-wphj-jr2w: ImageMagick 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
OSV
CVE-2017-14139: ImageMagick 7
osv·2017-09-04·CVSS 6.5
CVE-2017-14139 [MEDIUM] CVE-2017-14139: ImageMagick 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-14139 ImageMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [fedora-all]
bugzilla·2017-09-05·CVSS 6.5
CVE-2017-14139 [MEDIUM] CVE-2017-14139 ImageMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [fedora-all]
CVE-2017-14139 ImageMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE:
Bugzilla
CVE-2017-14139 GraphicsMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [epel-all]
bugzilla·2017-09-05·CVSS 6.5
CVE-2017-14139 [MEDIUM] CVE-2017-14139 GraphicsMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [epel-all]
CVE-2017-14139 GraphicsMagick: ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: t
Bugzilla
CVE-2017-14139 ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
bugzilla·2017-09-05·CVSS 6.5
CVE-2017-14139 [MEDIUM] CVE-2017-14139 ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
CVE-2017-14139 ImageMagick, GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
A memory leak vulnerability was found in Imagemagick 7.0.6-2 WriteMSLImage function in coders/msl.c that could cause denial of service.
Upstream bug:
https://github.com/ImageMagick/ImageMagick/issues/578
Upstream patch:
https://github.com/ImageMagick/ImageMagick/commit/13ee1160f9b2c2dc6945317bfbe8412be5999047
https://github.com/ImageMagick/ImageMagick/commit/1833d36ceb002c044d5723b7b4dce5b58eed5189
https://github.com/ImageMagick/ImageMagick/commit/dbe0008c6fa225d01085ca86f3e425c306ee6240
https://github.com/ImageMagick/ImageMagick/commit/d426a1dc84cfdafdac67bdb2a1ecc6e1798053e6
https://github.com/ImageMagick/ImageMagick/commit/0dfce0579c881245e495aa2d8d114e63b96a860e
References:
https://
2017-09-04
Published