CVE Vulnerabilities

CVE-2017-11505

Excessive Iteration

Published: Jul 21, 2017 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Ubuntu
LOW

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

Name Vendor Start Version End Version
Imagemagick Imagemagick * 6.9.9-0 (including)
Imagemagick Imagemagick 7.0.0-0 (including) 7.0.0-0 (including)
Imagemagick Imagemagick 7.0.1-0 (including) 7.0.1-0 (including)
Imagemagick Imagemagick 7.0.1-1 (including) 7.0.1-1 (including)
Imagemagick Imagemagick 7.0.1-2 (including) 7.0.1-2 (including)
Imagemagick Imagemagick 7.0.1-3 (including) 7.0.1-3 (including)
Imagemagick Imagemagick 7.0.1-4 (including) 7.0.1-4 (including)
Imagemagick Imagemagick 7.0.1-5 (including) 7.0.1-5 (including)
Imagemagick Imagemagick 7.0.1-6 (including) 7.0.1-6 (including)
Imagemagick Imagemagick 7.0.1-7 (including) 7.0.1-7 (including)
Imagemagick Imagemagick 7.0.1-8 (including) 7.0.1-8 (including)
Imagemagick Imagemagick 7.0.1-9 (including) 7.0.1-9 (including)
Imagemagick Imagemagick 7.0.1-10 (including) 7.0.1-10 (including)
Imagemagick Imagemagick 7.0.2-0 (including) 7.0.2-0 (including)
Imagemagick Imagemagick 7.0.2-1 (including) 7.0.2-1 (including)
Imagemagick Imagemagick 7.0.2-2 (including) 7.0.2-2 (including)
Imagemagick Imagemagick 7.0.2-3 (including) 7.0.2-3 (including)
Imagemagick Imagemagick 7.0.2-4 (including) 7.0.2-4 (including)
Imagemagick Imagemagick 7.0.2-5 (including) 7.0.2-5 (including)
Imagemagick Imagemagick 7.0.2-6 (including) 7.0.2-6 (including)
Imagemagick Imagemagick 7.0.2-7 (including) 7.0.2-7 (including)
Imagemagick Imagemagick 7.0.2-8 (including) 7.0.2-8 (including)
Imagemagick Imagemagick 7.0.2-9 (including) 7.0.2-9 (including)
Imagemagick Imagemagick 7.0.2-10 (including) 7.0.2-10 (including)
Imagemagick Imagemagick 7.0.3-0 (including) 7.0.3-0 (including)
Imagemagick Imagemagick 7.0.3-1 (including) 7.0.3-1 (including)
Imagemagick Imagemagick 7.0.3-2 (including) 7.0.3-2 (including)
Imagemagick Imagemagick 7.0.3-3 (including) 7.0.3-3 (including)
Imagemagick Imagemagick 7.0.3-4 (including) 7.0.3-4 (including)
Imagemagick Imagemagick 7.0.3-5 (including) 7.0.3-5 (including)
Imagemagick Imagemagick 7.0.3-6 (including) 7.0.3-6 (including)
Imagemagick Imagemagick 7.0.3-7 (including) 7.0.3-7 (including)
Imagemagick Imagemagick 7.0.3-8 (including) 7.0.3-8 (including)
Imagemagick Imagemagick 7.0.3-9 (including) 7.0.3-9 (including)
Imagemagick Imagemagick 7.0.3-10 (including) 7.0.3-10 (including)
Imagemagick Imagemagick 7.0.4-0 (including) 7.0.4-0 (including)
Imagemagick Imagemagick 7.0.4-1 (including) 7.0.4-1 (including)
Imagemagick Imagemagick 7.0.4-2 (including) 7.0.4-2 (including)
Imagemagick Imagemagick 7.0.4-3 (including) 7.0.4-3 (including)
Imagemagick Imagemagick 7.0.4-4 (including) 7.0.4-4 (including)
Imagemagick Imagemagick 7.0.4-5 (including) 7.0.4-5 (including)
Imagemagick Imagemagick 7.0.4-6 (including) 7.0.4-6 (including)
Imagemagick Imagemagick 7.0.4-7 (including) 7.0.4-7 (including)
Imagemagick Imagemagick 7.0.4-8 (including) 7.0.4-8 (including)
Imagemagick Imagemagick 7.0.4-9 (including) 7.0.4-9 (including)
Imagemagick Imagemagick 7.0.4-10 (including) 7.0.4-10 (including)
Imagemagick Imagemagick 7.0.5-0 (including) 7.0.5-0 (including)
Imagemagick Imagemagick 7.0.5-1 (including) 7.0.5-1 (including)
Imagemagick Imagemagick 7.0.5-2 (including) 7.0.5-2 (including)
Imagemagick Imagemagick 7.0.5-3 (including) 7.0.5-3 (including)
Imagemagick Imagemagick 7.0.5-4 (including) 7.0.5-4 (including)
Imagemagick Imagemagick 7.0.5-5 (including) 7.0.5-5 (including)
Imagemagick Imagemagick 7.0.5-6 (including) 7.0.5-6 (including)
Imagemagick Imagemagick 7.0.5-7 (including) 7.0.5-7 (including)
Imagemagick Imagemagick 7.0.5-8 (including) 7.0.5-8 (including)
Imagemagick Imagemagick 7.0.5-9 (including) 7.0.5-9 (including)
Imagemagick Imagemagick 7.0.5-10 (including) 7.0.5-10 (including)
Imagemagick Imagemagick 7.0.6-0 (including) 7.0.6-0 (including)
Imagemagick Imagemagick 7.0.6-1 (including) 7.0.6-1 (including)
Imagemagick Ubuntu trusty *
Imagemagick Ubuntu upstream *
Imagemagick Ubuntu xenial *
Imagemagick Ubuntu yakkety *
Imagemagick Ubuntu zesty *

References