CVE-2017-14739
imagemagick: The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed mem...
CVE-2017-14739 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2, released May 31, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0301
87th percentile
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |