In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.
References
Link | Resource |
---|---|
https://github.com/ImageMagick/ImageMagick/issues/741 | Exploit Issue Tracking Patch Third Party Advisory |
http://www.securityfocus.com/bid/100874 | Third Party Advisory VDB Entry |
https://usn.ubuntu.com/3681-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2017-09-12 01:29
Updated : 2019-10-02 17:03
NVD link : CVE-2017-14325
Mitre link : CVE-2017-14325
JSON object : View
CWE
CWE-772
Missing Release of Resource after Effective Lifetime
Products Affected
canonical
- ubuntu_linux
imagemagick
- imagemagick