CVE-2017-18211 In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKe...
CriticalCVSS 9.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/imagemagick(Debian:12) | < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| debian/imagemagick(Debian:13) | < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| debian/imagemagick(Debian:14) | < 8:6.9.9.34+dfsg-3 | 8:6.9.9.34+dfsg-3 |
| ImageMagick | = 7.0.7-0 | No fix listed |
| ImageMagick | = 7.0.7-1 | No fix listed |
| ImageMagick | = 7.0.7-2 | No fix listed |
| ImageMagick | = 7.0.7-3 | No fix listed |
| ImageMagick | = 7.0.7-4 | No fix listed |
| ImageMagick | = 7.0.7-5 | No fix listed |
| ImageMagick | = 7.0.7-6 | No fix listed |
| ImageMagick | = 7.0.7-8 | No fix listed |
| ImageMagick | = 7.0.7-9 | No fix listed |
| ImageMagick | = 7.0.7-10 | No fix listed |
| ImageMagick | = 7.0.7-11 | No fix listed |
| ImageMagick | = 7.0.7-12 | No fix listed |
| ImageMagick | = 7.0.7-13 | No fix listed |
| ImageMagick | = 7.0.7-14 | No fix listed |
| ImageMagick | = 7.0.7-15 | No fix listed |
| ImageMagick | = 7.0.7-16 | No fix listed |
| ImageMagick | = 7.0.7-17 | No fix listed |
| ImageMagick | = 7.0.7-18 | No fix listed |
| ImageMagick | = 7.0.7-19 | No fix listed |
| ImageMagick | = 7.0.7-20 | No fix listed |
| ImageMagick | = 7.0.7-21 | No fix listed |
| ImageMagick | = 7.0.7-22 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageMagick | = 7.0.7-23 | No fix listed |
| ImageMagick | = 7.0.7-24 | No fix listed |
| ImageMagick | = 7.0.7-25 | No fix listed |
| ImageMagick | = 7.0.7.7 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
References
- Debian Security Tracker CVE-2017-18211 vendor-advisory
- 103220 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- [debian-lts-announce] 20200907 [SECURITY] [DLA 2366-1] imagemagick security update mailing-list
- USN-3681-1 third-party-advisory vendor-advisory