4.3
CVSSv2

CVE-2018-10177

Published: 16/04/2018 Updated: 19/08/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 7.0.7-28

canonical ubuntu linux 17.10

canonical ubuntu linux 14.04

canonical ubuntu linux 16.04

canonical ubuntu linux 18.04

Vendor Advisories

Synopsis Moderate: ImageMagick security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Mod ...
Several security issues were fixed in ImageMagick ...
Debian Bug report logs - #894848 imagemagick: CVE-2018-9133: Excessive iteration in DecodeLabImage and EncodeLabImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 4 ...
Debian Bug report logs - #898217 imagemagick: CVE-2018-10804 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 8 May 2018 20:21:02 UTC Severity: normal Tags: fixed-upst ...
Debian Bug report logs - #898218 imagemagick: CVE-2018-10805 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 8 May 2018 20:27:02 UTC Severity: normal Tags: fixed-upst ...
Debian Bug report logs - #896018 imagemagick: CVE-2018-10177: Infinite loop in ReadOneMNGImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 18 Apr 2018 18:51:04 UTC ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics (MNG) data An attacker could exploit this to cause a denial of service via crafted MNG file ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
An issue was discovered in ImageMagick 707 A memory leak vulnerability was found in the function WriteGIFImage in coders/gifc, which allow remote attackers to cause a denial of service via a crafted file (CVE-2017-18254) An issue was discovered in ImageMagick 707 The MogrifyImageList function in MagickWand/mogrifyc allows attackers to caus ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, which allows attackers to cause a denial of service (CVE-2017-1000476) The ReadXWDImage function in coders\xwdc in ImageMagick 705-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of colo ...
Integer overflow in MagickCore/profilec in ImageMagick before 702-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable (CVE-2016-5841) ImageMagick 707-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/ddsc, ...