1
PublicDateAtUSN: 2017-12-27
2
Candidate: CVE-2017-17914
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17914
6
https://usn.ubuntu.com/usn/usn-3681-1
8
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function
9
ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial
10
of service (ReadOneMNGImage large loop) via a crafted mng image file.
13
mdeslaur> CVE-2017-17914.patch in wheezy
15
https://github.com/ImageMagick/ImageMagick/issues/908
16
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886584
22
upstream: https://github.com/ImageMagick/ImageMagick/commit/42781eeebadf111a2e01559735ea504a78192046
23
upstream_imagemagick: released (8:6.9.9.34+dfsg-3)
24
precise/esm_imagemagick: DNE
25
trusty_imagemagick: released (8:6.7.7.10-6ubuntu3.11)
26
xenial_imagemagick: released (8:6.8.9.9-7ubuntu5.11)
27
zesty_imagemagick: ignored (reached end-of-life)
28
artful_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu2.2)
29
bionic_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu6.2)
30
devel_imagemagick: needed