A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.
References
| Link | Resource |
|---|---|
| http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d | Issue Tracking Patch Third Party Advisory |
| http://www.securityfocus.com/bid/100556 | Third Party Advisory VDB Entry |
| https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/ | Exploit Patch Third Party Advisory VDB Entry |
| https://usn.ubuntu.com/4206-1/ | |
| http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d | Issue Tracking Patch Third Party Advisory |
| http://www.securityfocus.com/bid/100556 | Third Party Advisory VDB Entry |
| https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/ | Exploit Patch Third Party Advisory VDB Entry |
| https://usn.ubuntu.com/4206-1/ |
Configurations
History
21 Nov 2024, 03:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d - Issue Tracking, Patch, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/100556 - Third Party Advisory, VDB Entry | |
| References | () https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/ - Exploit, Patch, Third Party Advisory, VDB Entry | |
| References | () https://usn.ubuntu.com/4206-1/ - |
Information
Published : 2017-08-30 22:29
Updated : 2024-11-21 03:12
NVD link : CVE-2017-14042
Mitre link : CVE-2017-14042
CVE.ORG link : CVE-2017-14042
JSON object : View
Products Affected
graphicsmagick
- graphicsmagick
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer