Main Vulnerability Database Vulnerabilities #VU39581

Input validation error in ImageMagick and Debian Linux - CVE-2017-6498

Published: March 6, 2017 / Updated: August 8, 2020

Vulnerability identifier: #VU39581

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-6498

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.

ImageMagick
Debian Linux

Install update from vendor's website.