# CVE-2017-14174: imagemagick: In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) chec... CVE-2017-14174 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2, released May 31, 2018. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2017-14174 - Priority: Routine - CVSS: n/a (Low) - EPSS: 0.0225 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 6, 2017 ## Description In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | imagemagick Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [imagemagick 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | imagemagick-6-common Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6-common-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | imagemagick-6.q16 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6.q16-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | imagemagick-6.q16hdri Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6.q16hdri-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | imagemagick-common Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-common-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libimage-magick-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-perl-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libimage-magick-q16-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-q16-perl-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libimage-magick-q16hdri-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-q16hdri-perl-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagick++-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6-headers-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagick++-6.q16-7 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6.q16-7-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagick++-6.q16hdri-7 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6.q16hdri-7-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6-arch-config Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6-arch-config-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6-headers-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6.q16-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16-3-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6.q16-3-extra Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16-3-extra-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6.q16hdri-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16hdri-3-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickcore-6.q16hdri-3-extra Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16hdri-3-extra-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickwand-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6-headers-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickwand-6.q16-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6.q16-3-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | libmagickwand-6.q16hdri-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6.q16hdri-3-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | | Linux | perlmagick Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.2 | [perlmagick 8:6.9.7.4+dfsg-16ubuntu6.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-perlmagick-8-6.9.7.4-dfsg-16ubuntu6.2.md) | May 31, 2018 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo