6.5
CVSSv3

CVE-2017-9500

Published: 07/06/2017 Updated: 03/10/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows malicious users to cause a denial of service via a crafted file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 7.0.5-8

Vendor Advisories

Debian Bug report logs - #867825 imagemagick: CVE-2017-11526: CPU exhaustion in ReadOneMNGImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 18:39 ...
Debian Bug report logs - #869210 imagemagick: CVE-2017-11523: endless loop in ReadTXTImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 21 Jul 2017 15:39:02 U ...
Debian Bug report logs - #867798 imagemagick: CVE-2017-11524: assertion failed in WriteBlob Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 15:15:01 ...
Debian Bug report logs - #869830 imagemagick: CVE-2017-13145 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 20:51:02 UTC Severity: important Tags: ...
Debian Bug report logs - #869827 CVE-2017-11535: heap based overflow in psc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 20:30:01 UTC Severity: ...
Debian Bug report logs - #869712 CVE-2017-11537: palm fpe Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:36:01 UTC Severity: important Tags: sec ...
Debian Bug report logs - #869831 CVE-2017-11536 memory leak in jp2 coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 21:03:02 UTC Severity: impo ...
Debian Bug report logs - #867894 imagemagick: CVE-2017-11450 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 10 Jul 2017 11:39:06 UTC Severity: important Tags: ...
Debian Bug report logs - #869715 imagemagick: CVE-2017-12431: use after free in ReadWMFImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:45:09 ...
Debian Bug report logs - #869721 imagemagick: CVE-2017-12664 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:33:01 UTC Severity: important Tags: ...
Debian Bug report logs - #867810 imagemagick: CVE-2017-11525: memory exhaustion in ReadCINImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 16:42 ...
Debian Bug report logs - #867821 imagemagick: CVE-2017-11530: memory exhaustion in ReadEPTImage in eptc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2 ...
Debian Bug report logs - #864273 imagemagick: CVE-2017-9440 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 6 Jun 2017 05:39:02 UTC Severity: normal Tags: fixed-upstr ...
Debian Bug report logs - #867808 [imagemagick] CPU exhaustion in ReadRLEImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 16:42:01 UTC Severity: ...
Debian Bug report logs - #867823 imagemagick: CVE-2017-11529: memory leak in ReadMATImage in matc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 18 ...
Debian Bug report logs - #867826 imagemagick: CVE-2017-11478: CPU exhaustion in ReadOneDJVUImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 18:4 ...
Debian Bug report logs - #867824 imagemagick: CVE-2017-11505: CPU exhaustion in ReadOneJNGImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 18:39 ...
Debian Bug report logs - #869711 CVE-2017-11534: wmf memory leak Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:33:04 UTC Severity: important Ta ...
Debian Bug report logs - #869726 CVE-2017-11532: memory leak in coders/mpcc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:57:02 UTC Severity: ...
Debian Bug report logs - #868264 CVE-2017-11141 memory exhaustion in ReadMATImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 12 Jul 2017 21:57:02 UTC Severity: importa ...
Debian Bug report logs - #864274 imagemagick: CVE-2017-9439 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 6 Jun 2017 05:45:01 UTC Severity: normal Tags: fixed-upstr ...
Debian Bug report logs - #867721 CVE-2017-9501 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sat, 8 Jul 2017 21:57:02 UTC Severity: important Tags: fixed-upstream ...
Debian Bug report logs - #869725 CVE-2017-11531: Memory Leak in coders/histogramc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:51:02 UTC Sev ...
Debian Bug report logs - #869727 imagemagick: CVE-2017-12430: Memory exhaustion in mpc coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 22:06:01 ...
Debian Bug report logs - #869834 CVE-2017-11533: heap buffer overflow in uil coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 21:15:05 UTC Seve ...
Debian Bug report logs - #869796 imagemagick: CVE-2017-12642 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 14:15:02 UTC Severity: important Tags: ...
Debian Bug report logs - #868950 imagemagick: CVE-2017-11446 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 19 Jul 2017 19:09:01 UTC Severity: important Tags: fixed-u ...
Debian Bug report logs - #867367 imagemagick: CVE-2017-10928 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 6 Jul 2017 03:15:01 UTC Severity: important Tags: fixed-u ...
Debian Bug report logs - #867897 imagemagick: CVE-2017-11447 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 10 Jul 2017 11:42:01 UTC Severity: important Tags: ...
Debian Bug report logs - #867806 imagemagick: CVE-2017-11188: CPU exhaustion in ReadDPXImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 16:39:02 ...
Debian Bug report logs - #867812 imagemagick: CVE-2017-11527: memory exhaustion in ReadDPXImage in dpxc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2 ...
Debian Bug report logs - #867896 imagemagick: CVE-2017-11449 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 10 Jul 2017 11:39:15 UTC Severity: serious Tags: fi ...
Debian Bug report logs - #869722 Imagemagick: memory leak in quantize Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:33:07 UTC Severity: importa ...
Debian Bug report logs - #867778 imagemagick: CVE-2017-9500: assertion failed in ResetImageProfileIterator Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 9 Jul 2017 1 ...
Debian Bug report logs - #867893 imagemagick: CVE-2017-11448 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 10 Jul 2017 11:39:02 UTC Severity: important Tags: ...
Debian Bug report logs - #868184 CVE-2017-11170 memory exhaustion in ReadTGAImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 12 Jul 2017 21:57:02 UTC Severity: importa ...
Debian Bug report logs - #867811 imagemagick: CVE-2017-11528: memory leak in ReadDIBImage in dibc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Sun, 9 Jul 2017 16 ...
Debian Bug report logs - #869728 imagemagick: CVE-2017-13144 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 22:09:01 UTC Severity: serious Tags: se ...