7.1

CVE-2017-11527: imagemagick Uncontrolled Resource Consumption

CVSS: 7.1v2.0HighModified
AliasesSUSE-SU-2020:2750-1UBUNTU-CVE-2017-11527DEBIAN-CVE-2017-11527
Published 23-07-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-11527 is a high (CVSS 7.1) Uncontrolled Resource Consumption vulnerability in imagemagick. EPSS estimates a 1.77% chance of exploitation in the next 30 days, higher than 77.7% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v2.0 (NVD)
EPSS score
1.77%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 2
DLA-1081-1DSA-3914-1SUSE-SU-2017:3378-1SUSE-SU-2017:3388-1

Timeline

  1. 23-07-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

1.77%

Chance of exploitation in the next 30 days

Percentile

78%

Versus all other CVEs

30-day change

0.00 pp

From 1.77% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse4 products
  • ImageMagick&distro=SUSE Linux Enterprise Server 12 SP5< 6.8.8.1-71.144.8
  • ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 6.8.8.1-71.144.8
  • ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 6.8.8.1-71.144.8
  • ImageMagick&distro=SUSE Linux Enterprise Workstation Extension 12 SP5< 6.8.8.1-71.144.8
Debian1 product
  • imagemagick< 8:6.9.7.4+dfsg-12
Imagemagick1 product
  • imagemagick≤ 6.9.8-10 | 7.0.1-0 | 7.0.1-1 | 7.0.1-2 | 7.0.1-3 | 7.0.1-4 | 7.0.1-5 | 7.0.1-6 | 7.0.1-7 | 7.0.1-8 | 7.0.1-9 | 7.0.1-10 | 7.0.2-0 | 7.0.2-1 | 7.0.2-2 | 7.0.2-3 | 7.0.2-4 | 7.0.2-5 | 7.0.2-6 | 7.0.2-7 | 7.0.2-8 | 7.0.2-9 | 7.0.2-10 | 7.0.3-0 | 7.0.3-1 | 7.0.3-2 | 7.0.3-3 | 7.0.3-4 | 7.0.3-5 | 7.0.3-6 | 7.0.3-7 | 7.0.3-8 | 7.0.3-9 | 7.0.3-10 | 7.0.4-0 | 7.0.4-1 | 7.0.4-2 | 7.0.4-3 | 7.0.4-4 | 7.0.4-5 | 7.0.4-6 | 7.0.4-7 | 7.0.4-8 | 7.0.4-9 | 7.0.4-10 | 7.0.5-0 | 7.0.5-1 | 7.0.5-4 | 7.0.5-5 | 7.0.5-6 | 7.0.5-7 | 7.0.5-8 | 7.0.5-9 | 7.0.5-10 | 7.0.6-0
Ubuntu1 product
  • imagemagick< 8:6.7.7.10-6ubuntu3.8 | < 8:6.8.9.9-7ubuntu5.8

4 vendors · 7 products

References

8 links