{"id":"CVE-2017-14342","aliases":["DEBIAN-CVE-2017-14342","EUVD-2017-5845","GHSA-cjc5-j22r-w3p7","SUSE-SU-2017:3378-1","SUSE-SU-2017:3388-1","SUSE-SU-2017:3435-1","UBUNTU-CVE-2017-14342","USN-3681-1"],"status":"published","title":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a...","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01372,"percentile":0.72143,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2017-09-12T00:00:00Z","modified":"2026-10-24T10:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.9.34+dfsg-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.9.34+dfsg-3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.14.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.14.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.14.1"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.17.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.19.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.78.19.1"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.2"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9"],"bundled":124},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9"],"bundled":124},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.2"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6"],"bundled":124}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://usn.ubuntu.com/3681-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/650","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14342"},{"url":"https://usn.ubuntu.com/3681-1"},{"url":"https://github.com/advisories/GHSA-cjc5-j22r-w3p7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-14342","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173378-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1048457","tags":["report"]},{"url":"https://bugzilla.suse.com/1049796","tags":["report"]},{"url":"https://bugzilla.suse.com/1050116","tags":["report"]},{"url":"https://bugzilla.suse.com/1050139","tags":["report"]},{"url":"https://bugzilla.suse.com/1050632","tags":["report"]},{"url":"https://bugzilla.suse.com/1051441","tags":["report"]},{"url":"https://bugzilla.suse.com/1051847","tags":["report"]},{"url":"https://bugzilla.suse.com/1052450","tags":["report"]},{"url":"https://bugzilla.suse.com/1052553","tags":["report"]},{"url":"https://bugzilla.suse.com/1052689","tags":["report"]},{"url":"https://bugzilla.suse.com/1052758","tags":["report"]},{"url":"https://bugzilla.suse.com/1052764","tags":["report"]},{"url":"https://bugzilla.suse.com/1054757","tags":["report"]},{"url":"https://bugzilla.suse.com/1055214","tags":["report"]},{"url":"https://bugzilla.suse.com/1056432","tags":["report"]},{"url":"https://bugzilla.suse.com/1057719","tags":["report"]},{"url":"https://bugzilla.suse.com/1057729","tags":["report"]},{"url":"https://bugzilla.suse.com/1057730","tags":["report"]},{"url":"https://bugzilla.suse.com/1058485","tags":["report"]},{"url":"https://bugzilla.suse.com/1058637","tags":["report"]},{"url":"https://bugzilla.suse.com/1059666","tags":["report"]},{"url":"https://bugzilla.suse.com/1059778","tags":["report"]},{"url":"https://bugzilla.suse.com/1060577","tags":["report"]},{"url":"https://bugzilla.suse.com/1066003","tags":["report"]},{"url":"https://bugzilla.suse.com/1067181","tags":["report"]},{"url":"https://bugzilla.suse.com/1067184","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16546","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173388-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050083","tags":["report"]},{"url":"https://bugzilla.suse.com/1052744","tags":["report"]},{"url":"https://bugzilla.suse.com/1057157","tags":["report"]},{"url":"https://bugzilla.suse.com/1060176","tags":["report"]},{"url":"https://bugzilla.suse.com/1061254","tags":["report"]},{"url":"https://bugzilla.suse.com/1062750","tags":["report"]},{"url":"https://bugzilla.suse.com/1067409","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16669","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173435-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1056426","tags":["report"]},{"url":"https://bugzilla.suse.com/1056429","tags":["report"]},{"url":"https://bugzilla.suse.com/1057508","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14165","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-14342","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3681-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-7443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-9133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11656","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-14342","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T17:00:00Z","modified":"2024-08-05T19:20:41.549Z","updated_at":"2026-11-02T14:33:12.267141Z"}],"euvd":[{"id":"EUVD-2017-5845","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T17:00:00Z","modified":"2024-08-05T19:20:41Z","updated_at":"2026-11-03T02:23:17.130971Z"}],"ghsa":[{"id":"GHSA-cjc5-j22r-w3p7","title":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a...","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2022-05-14T01:09:50Z","modified":"2025-04-20T03:45:49Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:01:52.186588Z"}],"nvd":[{"id":"CVE-2017-14342","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T17:29:00.307Z","modified":"2026-06-17T01:05:59.283Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:03:58.85945Z"}],"osv":[{"id":"CVE-2017-14342","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T17:29:00.307Z","modified":"2026-10-24T10:47:29.015130979Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:04.572713Z"},{"id":"DEBIAN-CVE-2017-14342","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T17:29:00.307Z","modified":"2026-09-01T20:03:43.837963535Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-14342","description":"ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.","status":"published","published":"2017-09-12T00:00:00Z","modified":"2026-04-22T11:16:27.866866Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"SUSE-SU-2017:3378-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n  * CVE-2017-14607: out of bounds read flaw related to ReadTIFFImagehas  \n    could possibly disclose potentially sensitive memory [bsc#1059778]\n  \n  * CVE-2017-11640: NULL pointer deref in WritePTIFImage() in coders/tiff.c [bsc#1050632]\n  \n  * CVE-2017-14342: a memory exhaustion vulnerability in ReadWPGImage \n    in coders/wpg.c could lead to denial of service [bsc#1058485]\n\n  * CVE-2017-14341: Infinite loop in the ReadWPGImage function [bsc#1058637]\n\n  * CVE-2017-16546: problem in the function ReadWPGImage in coders/wpg.c \n    could lead to denial of service [bsc#1067181]\n\n  * CVE-2017-16545: The ReadWPGImage function in coders/wpg.c in  \n    validation problems could lead to denial of service [bsc#1067184]\n\n  * CVE-2017-14175: Lack of End of File check could lead to denial of service [bsc#1057719]\n\n  * CVE-2017-13769: denial of service issue in function WriteTHUMBNAILImage in coders/thumbnail.c [bsc#1056432]\n\n  * CVE-2017-13134: a heap-based buffer over-read was found in thefunction SFWScan \n    in coders/sfw.c, which allows attackers to cause adenial of service via a crafted file. [bsc#1055214]\n\n  * CVE-2017-11478: ReadOneDJVUImage in coders/djvu.c in ImageMagick allows remote attackers to cause a DoS [bsc#1049796]\n\n  * CVE-2017-15930: Null Pointer dereference  while transfering JPEG scanlines could lead to denial of service [bsc#1066003]\n\n  * CVE-2017-12983: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c \n    allows remote attackers to cause a denial of service [bsc#1054757]\n\n  * CVE-2017-14531: memory exhaustion issue in ReadSUNImage incoders/sun.c. [bsc#1059666]\n\n  * CVE-2017-12435: Memory exhaustion in ReadSUNImage in coders/sun.c, \n    which allows attackers to cause denial of service [bsc#1052553]\n\n  * CVE-2017-12587: User controlable large loop in the ReadPWPImage in coders\\pwp.c could lead to denial of service [bsc#1052450]\n\n  * CVE-2017-14173: unction ReadTXTImage is vulnerable to a integer overflow that could lead to denial of service [bsc#1057729]\n  \n  * CVE-2017-11188: ImageMagick: The ReadDPXImage function in codersdpx.c in ImageMagick 7.0.6-0 has a largeloop vulnerability that can cause CPU exhaustion via a crafted DPX file, relatedto lack of an EOF check. [bnc#1048457]\n\n  * CVE-2017-11527: ImageMagick: ReadDPXImage in coders/dpx.c allows remote attackers to cause DoS [bnc#1050116] \n\n  * CVE-2017-11535: GraphicsMagick, ImageMagick: Heap-based buffer over-read in WritePSImage() in coders/ps.c [bnc#1050139]\n\n  * CVE-2017-11752: ImageMagick: ReadMAGICKImage in coders/magick.c allows to cause DoS  [bnc#1051441] \n\n  * CVE-2017-12140: ImageMagick: ReadDCMImage in codersdcm.c has a ninteger signedness error leading to excessive memory consumption [bnc#1051847] \n\n  * CVE-2017-12669: ImageMagick: Memory leak in WriteCALSImage in coders/cals.c [bnc#1052689]\n\n  * CVE-2017-12662: GraphicsMagick, ImageMagick: Memory leak in WritePDFImage in coders/pdf.c [bnc#1052758]\n\n  * CVE-2017-12644: ImageMagick: Memory leak in ReadDCMImage in codersdcm.c [bnc#1052764]\n\n  * CVE-2017-14172: ImageMagick: Lack of end of file check in ReadPSImage() could lead to a denial of service [bnc#1057730]\n\n  * CVE-2017-14733: GraphicsMagick: Heap overflow on ReadRLEImage in coders/rle.c could lead to denial of service [bnc#1060577]\n  \n","status":"published","published":"2017-12-20T11:23:56Z","modified":"2026-02-04T04:17:20.155603Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3388-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n  * CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service [bsc#1061254]\n  * CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service [bsc#1060176]\n  * Memory leak in WriteINLINEImage in coders/inline.c could lead to denial of service [bsc#1052744]\n  * CVE-2017-14607: out of bounds read flaw related to ReadTIFFImagehas  could possibly disclose potentially sensitive memory [bsc#1059778]\n  * CVE-2017-11640: NULL pointer deref in WritePTIFImage() in coders/tiff.c [bsc#1050632]\n  * CVE-2017-14342: a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c could lead to denial of service [bsc#1058485]\n  * CVE-2017-14341: Infinite loop in the ReadWPGImage function [bsc#1058637]\n  * CVE-2017-16546: problem in the function ReadWPGImage in coders/wpg.c could lead to denial of service [bsc#1067181]\n  * CVE-2017-16545: The ReadWPGImage function in coders/wpg.c in  validation problems could lead to denial of service [bsc#1067184]\n  * CVE-2017-16669: problem in coders/wpg.c could allow remote attackers to cause a denial of service via crafted file [bsc#1067409]\n  * CVE-2017-14175: Lack of End of File check could lead to denial of service [bsc#1057719]\n  * CVE-2017-14138: memory leak vulnerability in ReadWEBPImage in coders/webp.c could lead to denial of service [bsc#1057157]\n  * CVE-2017-13769: denial of service issue in function WriteTHUMBNAILImage in coders/thumbnail.c [bsc#1056432]\n  * CVE-2017-13134: a heap-based buffer over-read was found in thefunction SFWScan in coders/sfw.c, which allows attackers to cause adenial of service via a crafted file. [bsc#1055214]\n  * CVE-2017-15217: memory leak in ReadSGIImage in coders/sgi.c [bsc#1062750]\n  * CVE-2017-11478: ReadOneDJVUImage in coders/djvu.c in ImageMagick allows remote attackers to cause a DoS [bsc#1049796]\n  * CVE-2017-15930: Null Pointer dereference  while transfering JPEG scanlines could lead to denial of service [bsc#1066003]\n  * CVE-2017-12983: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c inImageMagick 7.0.6-8 allows remote attackers to cause a denial of service [bsc#1054757]\n  * CVE-2017-14531: memory exhaustion issue in ReadSUNImage incoders/sun.c. [bsc#1059666]\n  * CVE-2017-12435: Memory exhaustion in ReadSUNImage in coders/sun.c, which allows attackers to cause denial of service [bsc#1052553]\n  * CVE-2017-12587: User controlable large loop in the ReadPWPImage in coders\\pwp.c could lead to denial of service [bsc#1052450]\n  * CVE-2017-11523: ReadTXTImage in coders/txt.c allows remote attackers to cause a denial of service [bsc#1050083]\n  * CVE-2017-14173: unction ReadTXTImage is vulnerable to a integer overflow that could lead to denial of service [bsc#1057729]\n  * CVE-2017-11188: ImageMagick: The ReadDPXImage function in codersdpx.c in ImageMagick 7.0.6-0 has a largeloop vulnerability that can cause CPU exhaustion via a crafted DPX file, relatedto lack of an EOF check. [bnc#1048457]\n  * CVE-2017-11527: ImageMagick: ReadDPXImage in coders/dpx.c allows remote attackers to cause DoS [bnc#1050116] \n  * CVE-2017-11535: GraphicsMagick, ImageMagick: Heap-based buffer over-read in WritePSImage() in coders/ps.c [bnc#1050139]\n  * CVE-2017-11752: ImageMagick: ReadMAGICKImage in coders/magick.c allows to cause DoS  [bnc#1051441] \n  * CVE-2017-12140: ImageMagick: ReadDCMImage in codersdcm.c has a ninteger signedness error leading to excessive memory consumption [bnc#1051847] \n  * CVE-2017-12669: ImageMagick: Memory leak in WriteCALSImage in coders/cals.c [bnc#1052689]\n  * CVE-2017-12662: GraphicsMagick, ImageMagick: Memory leak in WritePDFImage in coders/pdf.c [bnc#1052758]\n  * CVE-2017-12644: ImageMagick: Memory leak in ReadDCMImage in codersdcm.c [bnc#1052764]\n  * CVE-2017-14172: ImageMagick: Lack of end of file check in ReadPSImage() could lead to a denial of service [bnc#1057730]\n  * CVE-2017-14733: GraphicsMagick: Heap overflow on ReadRLEImage in coders/rle.c could lead to denial of service [bnc#1060577]\n\n","status":"published","published":"2017-12-20T11:24:34Z","modified":"2026-02-04T04:12:39.884417Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3435-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\n  * CVE-2017-11640: NULL pointer deref in WritePTIFImage() in coders/tiff.c could lead to denial of service [bsc#1050632]\n  * CVE-2017-14342: Memory exhaustion in ReadWPGImage in coders/wpg.c could lead to denial of service [bsc#1058485]\n  * CVE-2017-14341: Infinite loop in the ReadWPGImage function could lead to denial of service [bsc#1058637]\n  * CVE-2017-16546: Issue in ReadWPGImage function in coders/wpg.c could lead to denial of service [bsc#1067181]\n  * CVE-2017-16545: The ReadWPGImage function in coders/wpg.c in  validation problems could lead to denial of service [bsc#1067184]\n  * CVE-2017-16669: coders/wpg.c  allows remote attackers to cause a denial of service via crafted file [bsc#1067409]\n  * CVE-2017-13776: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056429]\n  * CVE-2017-13777: denial of service issue in ReadXBMImage() in a coders/xbm.c [bsc#1056426]\n  * CVE-2017-13134: heap-based buffer over-read in the function SFWScan in coders/sfw.c could lead to denial of service via a crafted file [bsc#1055214]\n  * CVE-2017-15930: Null Pointer dereference  while transfering JPEG scanlines could lead to denial of service [bsc#1066003]\n  * CVE-2017-12983: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. [bsc#1054757] \n  * CVE-2017-14165: The ReadSUNImage function in coders/sun.c has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c. [bsc#1057508]\n  * CVE-2017-12587: Large loop vulnerability in the ReadPWPImage function in coders\\pwp.c. [bsc#1052450]\n","status":"published","published":"2017-12-27T09:55:41Z","modified":"2026-02-04T03:49:29.331218Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3681-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2018-06-12T11:40:14Z","modified":"2026-04-22T09:46:51.738947Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}