CVE-2017-13769
imagemagick: The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a...
CVE-2017-13769 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2, released May 31, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0140
72nd percentile
The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |