CVE-2017-9144 — Improper Input Validation in Imagemagick
Severity
6.5MEDIUMNVD
EPSS
0.9%
top 23.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 22
Latest updateMay 13
Description
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6
Affected Packages3 packages
Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, 18.04
Patches
🔴Vulnerability Details
4📋Vendor Advisories
5Red Hat▶
ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144)↗2017-07-17
Debian▶
CVE-2017-9144: imagemagick - In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incor...↗2017
Debian▶
CVE-2017-11352: imagemagick - In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because ...↗2017
💬Community
4Bugzilla▶
CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144) [fedora-all]↗2017-07-17
Bugzilla▶
CVE-2017-11352 ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144)↗2017-07-17
Bugzilla▶
CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144 ImageMagick: various flaws [fedora-all]↗2017-05-25