Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 630674 (CVE-2017-14248, CVE-2017-14249) - <media-gfx/imagemagick-{6.9.9.18,7.0.7.6}: Multiple DoS Vulnerabilities (CVE-2017-{14248,14249})
Summary: <media-gfx/imagemagick-{6.9.9.18,7.0.7.6}: Multiple DoS Vulnerabilities (CVE-...
Status: RESOLVED FIXED
Alias: CVE-2017-14248, CVE-2017-14249
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor
Assignee: Gentoo Security
URL: https://github.com/ImageMagick/ImageM...
Whiteboard: B3 [glsa cve]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-11 13:13 UTC by D'juan McDonald (domhnall)
Modified: 2017-11-11 14:18 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description D'juan McDonald (domhnall) 2017-09-11 13:13:15 UTC 
CVE-2017-14248:(https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14248)

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

Upstream Bug:(https://github.com/ImageMagick/ImageMagick/issues/717)
Upstream Patch 1/1:(commit c5402b6e0fcf8b694ae2af6a6652ebb8ce0ccf46)
-------------------------------------------------------------------------


CVE-2017-14249:(https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14249)

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.

Upstream Bug:(https://github.com/ImageMagick/ImageMagick/issues/708)
Upstream Patch 2/2:(
IM7 https://github.com/ImageMagick/ImageMagick/commit/2071d67ebf729f76d73c33c1152df4816d1d79ac

IM6 https://github.com/ImageMagick/ImageMagick/commit/66112b7a7b64f688efe6fec53a829874a74dea04
)
-------------------------------------------------------------------

Daj Uan (jmbailey/mbailey_j)
Gentoo Security Padawan
Comment 2 GLSAMaker/CVETool Bot gentoo-dev 2017-11-11 14:18:14 UTC 
This issue was resolved and addressed in
 GLSA 201711-07 at https://security.gentoo.org/glsa/201711-07
by GLSA coordinator Aaron Bauman (b-man).