CVE-2017-18250

Published: 27 March 2018

An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
imagemagick Launchpad, Ubuntu, Debian	Upstream	Needs triage



	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (code not present)
	Ubuntu 16.04 LTS (Xenial Xerus)	Not vulnerable (code not present)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was not-affected [code not present])
	Patches: Upstream: https://github.com/ImageMagick/ImageMagick/commit/2f368e74a51ec7541b6595af712d17d6d1376534

Notes

Author	Note
mdeslaur	check if 7.x only

References

Bugs

https://github.com/ImageMagick/ImageMagick/issues/793

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM