PT-2017-3902

CVE-2017-13777

·

Published

2017-08-24

·

Updated

2019-12-16

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26
Description The issue is related to a denial of service in the ReadXBMImage() function, specifically in the "Read hex image data" version==10 case, which can cause large amounts of CPU and memory consumption. This can lead to resource exhaustion, allowing a remote attacker to cause a denial of service.
Recommendations For GraphicsMagick version 1.3.26, consider disabling the ReadXBMImage() function as a temporary workaround to prevent potential denial of service attacks until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
DLA-1082-1
DLA-1456-1
DSA-4321-1
DSA-4321-2
SUSE-SU-2017:3435-1
USN-4222-1
Found an issue in the description? Have something to add? Feel free to write us 👾