CVE-2017-13758

2017-08-2900:00:00

ubuntu.com

0.005 Low

EPSS

Percentile

76.3%

JSON

In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the
TracePoint() function in MagickCore/draw.c.

Bugs

<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878508>

Notes

Author	Note
mdeslaur	0306-CVE-2017-13758-Fix-heap-based-buffer-overflow-in-TracePoint.patch in wheezy 0262-CVE-2017-13758.patch in jessie 0101-CVE-2017-13758.patch in unstable

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchimagemagick< 8:6.9.7.4+dfsg-16ubuntu2.2UNKNOWN
ubuntu18.04noarchimagemagick< 8:6.9.7.4+dfsg-16ubuntu6.2UNKNOWN
ubuntu14.04noarchimagemagick< 8:6.7.7.10-6ubuntu3.11UNKNOWN
ubuntu16.04noarchimagemagick< 8:6.8.9.9-7ubuntu5.11UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	17.10	noarch	imagemagick	< 8:6.9.7.4+dfsg-16ubuntu2.2	UNKNOWN
ubuntu	18.04	noarch	imagemagick	< 8:6.9.7.4+dfsg-16ubuntu6.2	UNKNOWN
ubuntu	14.04	noarch	imagemagick	< 8:6.7.7.10-6ubuntu3.11	UNKNOWN
ubuntu	16.04	noarch	imagemagick	< 8:6.8.9.9-7ubuntu5.11	UNKNOWN