CVE-2017-18252
imagemagick: An issue was discovered in ImageMagick 7.0.7
CVE-2017-18252 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2, released May 31, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0193
80th percentile
An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.2 | May 31, 2018 |