CVE-2017-14739 PUBLISHED

The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.

EPSS 0.70% · 71.8th percentile

Risk Scores

EPSS Score
0.70%
71.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSimagemagick0, 8:6.7.7.10-5ubuntu3, 8:6.7.7.10-5ubuntu4
Ubuntu:18.04:LTSimagemagick8:6.9.7.4+dfsg-16ubuntu6, 0, 8:6.9.7.4+dfsg-16ubuntu2
Ubuntu:16.04:LTSimagemagick8:6.8.9.9-7ubuntu2, 8:6.8.9.9-7ubuntu3, 8:6.8.9.9-7ubuntu4

Timeline

References

Open in Interactive Console →