CVE-2017-17681: canonical ubuntu_linux Infinite Loop

Vulnerability summary

CVE-2017-17681 is a high (CVSS 7.1) Infinite Loop vulnerability in canonical ubuntu_linux. EPSS estimates a 2.97% chance of exploitation in the next 30 days, higher than 87% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-12-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.

• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.