Lucene search
Veracode Vulnerability DatabaseVERACODE:5078HistorySep 13, 2017 - 6:55 a.m.
Denial Of Service (DoS) Through CPU Exhaustion
2017-09-1306:55:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.003
Percentile
69.8%
ImageMagick is vulnerable to denial of service (DoS) attacks. A malicious user can pass a wpg file to the application to cause a large loop that consumes large amount of CPU through the ReadWPGImage() function in coders/wpg.c.
References
github.com/ImageMagick/ImageMagick/commit/4eae304e773bad8a876c3c26fdffac24d4253ae4
github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24
github.com/ImageMagick/ImageMagick/issues/654
github.com/jgj212
github.com/jgj212/poc/blob/master/cpu-ReadWPGImage
lists.debian.org/debian-lts-announce/2019/05/msg00015.html
lists.debian.org/debian-lts-announce/2020/09/msg00007.html
usn.ubuntu.com/3681-1/
Related
ubuntucve
ubuntucve
CVE-2017-14341
2017-09-12 00:00:00
redhatcve
redhatcve
CVE-2017-14341
2017-09-13 12:19:05
prion
prion
Code injection
2017-09-12 17:29:00
debiancve
debiancve
CVE-2017-14341
2017-09-12 17:29:00
osv
osv
CVE-2017-14341
2017-09-12 17:29:00
imagemagick - security update
2017-10-10 00:00:00
imagemagick - security update
2019-05-13 00:00:00
cve
cve
CVE-2017-14341
2017-09-12 17:29:00
cvelist
cvelist
CVE-2017-14341
2017-09-12 17:00:00
nvd
nvd
CVE-2017-14341
2017-09-12 17:29:00
suse
suse
Security update for GraphicsMagick (important)
2017-12-06 03:09:38
Security update for GraphicsMagick (important)
2017-12-27 15:08:30
Security update for ImageMagick (important)
2017-12-20 18:09:33
nessus
nessus
openSUSE Security Update : GraphicsMagick (openSUSE-2017-1346)
2017-12-14 00:00:00
Debian DLA-1131-1 : imagemagick security update
2017-10-11 00:00:00
SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2017:3378-1)
2017-12-21 00:00:00
openvas
openvas
openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2017:3223-1)
2017-12-07 00:00:00
Debian: Security Advisory (DLA-1131-1)
2018-02-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:3378-1)
2021-06-09 00:00:00
debian
debian
[SECURITY] [DLA 1131-1] imagemagick security update
2017-10-11 02:59:21
[SECURITY] [DLA 1785-1] imagemagick security update
2019-05-14 10:40:29
[SECURITY] [DLA 2366-1] imagemagick security update
2020-09-07 21:24:40
cloudfoundry
cloudfoundry
USN-3681-1: ImageMagick vulnerabilities | Cloud Foundry
2018-06-14 00:00:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2018-06-12 00:00:00