CVE-2017-14528
imagemagick: The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF T...
CVE-2017-14528 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.11, released May 14, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Negligible
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0262
85th percentile
The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.11 | May 14, 2021 |