Vulnerability-Lookup

CVE-2017-13143 (GCVE-0-2017-13143)

Vulnerability from cvelistv5 – Published: 2017-08-23 06:00 – Updated: 2024-08-05 18:58

Summary

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://github.com/ImageMagick/ImageMagick/commit…	x_refsource_CONFIRM
https://usn.ubuntu.com/3681-1/	vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/201711-07	vendor-advisoryx_refsource_GENTOO
https://www.debian.org/security/2017/dsa-4019	vendor-advisoryx_refsource_DEBIAN
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug…	x_refsource_CONFIRM
https://www.debian.org/security/2018/dsa-4204	vendor-advisoryx_refsource_DEBIAN
https://github.com/ImageMagick/ImageMagick/issues/362	x_refsource_CONFIRM

Date Public

2017-08-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:58:12.360Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
          },
          {
            "name": "USN-3681-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3681-1/"
          },
          {
            "name": "GLSA-201711-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201711-07"
          },
          {
            "name": "DSA-4019",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-4019"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
          },
          {
            "name": "DSA-4204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4204"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-08-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-13T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
        },
        {
          "name": "USN-3681-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3681-1/"
        },
        {
          "name": "GLSA-201711-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201711-07"
        },
        {
          "name": "DSA-4019",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-4019"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
        },
        {
          "name": "DSA-4204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4204"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-13143",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960",
              "refsource": "CONFIRM",
              "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
            },
            {
              "name": "USN-3681-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3681-1/"
            },
            {
              "name": "GLSA-201711-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201711-07"
            },
            {
              "name": "DSA-4019",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-4019"
            },
            {
              "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012",
              "refsource": "CONFIRM",
              "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
            },
            {
              "name": "DSA-4204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4204"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/362",
              "refsource": "CONFIRM",
              "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-13143",
    "datePublished": "2017-08-23T06:00:00.000Z",
    "dateReserved": "2017-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-05T18:58:12.360Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-13143",
      "date": "2026-09-15",
      "epss": "0.02902",
      "percentile": "0.86211"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"6.9.7-5\", \"matchCriteriaId\": \"EBF81B46-43DA-40F9-9F40-061B613895FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"693C9F8F-A8C1-4D06-8F31-E085E16E701C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3E12EB4-B8F6-43A3-847D-DBC96AE10905\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"30539421-5872-4C2E-94AE-8A2B05C952C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A5B7537-8563-409D-82DE-EB07107D3C04\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA648D3C-A464-4F54-8B5E-E8431531FBB5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6666BB0-B211-490F-884C-BE410CD19DAF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5FF2582D-1513-448B-8B61-9C4844B08324\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E57E6BA4-A727-4CF5-B15F-76632D02617A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C721BC6F-61DD-4ED1-8024-2946C494AEC4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD319D32-FE7A-456D-AFEE-DC9F0D98652C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"09CDF263-38F5-469F-984B-9D9A223159B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"243FF3C1-D676-4D5F-A90C-3017DCBBE73A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B8BDDE6-6B38-442B-83A4-FAADBAE1C792\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4DCD89B9-6A69-41DE-BE38-5E9193828279\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"139BC277-8E00-4700-8B47-6D3A3CB38B04\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0FA2E18-6F7B-49D6-B60C-38851398F9B7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B7F510A-A439-47A3-AF31-4BF7F74D58A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A91B94E3-33BB-46B6-A1AE-EAA9906605CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5B3DE17-08A8-457D-9AEB-BD6E04376B34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"98AD438E-28B7-4491-B58F-55FDE7F67CFD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB9B68E7-0E40-437A-A71B-0C078FE76FD8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"948D5778-AD2A-4293-AE39-A406D75F5678\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D391DECE-2408-4A8F-ACE6-F18028C422A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24A0C584-9DA3-48B0-B152-67B9E0239876\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E42943C5-CC66-4E88-9085-1BD39937C09B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E396985D-BE6A-4F4C-B294-FE69724534EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D1D84944-322C-4B5D-9B1C-587301747A34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B48F5327-CA20-4756-A06F-B30B660E8DA7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84C11EC2-C798-4C3B-8E00-9C70C3499B33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"441F9FAE-11FA-4976-8BB3-4A3A79B57663\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4389D4A-8AD4-421E-AD4D-6761F45B7F6B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1620AF57-49AF-4487-80A1-07627F50F817\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF373D13-0AB1-4518-AFFE-D09A5F56E992\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86483865-BFC3-4845-80DE-A6AC632A92A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A147E12-E5D4-400E-9432-BB5BCF2352CE\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.\"}, {\"lang\": \"es\", \"value\": \"En ImageMagick en versiones anteriores a la 6.9.7-6 y 7.x en versiones anteriores a la 7.0.4-6, la funci\\u00f3n ReadMATImage en coders/mat.c emplea datos sin inicializar, lo que podr\\u00eda permitir que atacantes remotos obtengan informaci\\u00f3n sensible de la memoria de proceso.\"}]",
      "id": "CVE-2017-13143",
      "lastModified": "2024-11-21T03:11:01.710",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-08-23T06:29:00.340",
      "references": "[{\"url\": \"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/ImageMagick/ImageMagick/issues/362\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201711-07\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://usn.ubuntu.com/3681-1/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.debian.org/security/2017/dsa-4019\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.debian.org/security/2018/dsa-4204\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/ImageMagick/ImageMagick/issues/362\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201711-07\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://usn.ubuntu.com/3681-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.debian.org/security/2017/dsa-4019\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.debian.org/security/2018/dsa-4204\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-200\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-13143\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-08-23T06:29:00.340\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.\"},{\"lang\":\"es\",\"value\":\"En ImageMagick en versiones anteriores a la 6.9.7-6 y 7.x en versiones anteriores a la 7.0.4-6, la funci\u00f3n ReadMATImage en coders/mat.c emplea datos sin inicializar, lo que podr\u00eda permitir que atacantes remotos obtengan informaci\u00f3n sensible de la memoria de proceso.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"6.9.7-5\",\"matchCriteriaId\":\"EBF81B46-43DA-40F9-9F40-061B613895FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"693C9F8F-A8C1-4D06-8F31-E085E16E701C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3E12EB4-B8F6-43A3-847D-DBC96AE10905\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30539421-5872-4C2E-94AE-8A2B05C952C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A5B7537-8563-409D-82DE-EB07107D3C04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA648D3C-A464-4F54-8B5E-E8431531FBB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6666BB0-B211-490F-884C-BE410CD19DAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FF2582D-1513-448B-8B61-9C4844B08324\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E57E6BA4-A727-4CF5-B15F-76632D02617A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C721BC6F-61DD-4ED1-8024-2946C494AEC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD319D32-FE7A-456D-AFEE-DC9F0D98652C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09CDF263-38F5-469F-984B-9D9A223159B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"243FF3C1-D676-4D5F-A90C-3017DCBBE73A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B8BDDE6-6B38-442B-83A4-FAADBAE1C792\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DCD89B9-6A69-41DE-BE38-5E9193828279\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"139BC277-8E00-4700-8B47-6D3A3CB38B04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0FA2E18-6F7B-49D6-B60C-38851398F9B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B7F510A-A439-47A3-AF31-4BF7F74D58A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A91B94E3-33BB-46B6-A1AE-EAA9906605CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5B3DE17-08A8-457D-9AEB-BD6E04376B34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98AD438E-28B7-4491-B58F-55FDE7F67CFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB9B68E7-0E40-437A-A71B-0C078FE76FD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"948D5778-AD2A-4293-AE39-A406D75F5678\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D391DECE-2408-4A8F-ACE6-F18028C422A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24A0C584-9DA3-48B0-B152-67B9E0239876\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E42943C5-CC66-4E88-9085-1BD39937C09B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E396985D-BE6A-4F4C-B294-FE69724534EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1D84944-322C-4B5D-9B1C-587301747A34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B48F5327-CA20-4756-A06F-B30B660E8DA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84C11EC2-C798-4C3B-8E00-9C70C3499B33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"441F9FAE-11FA-4976-8BB3-4A3A79B57663\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4389D4A-8AD4-421E-AD4D-6761F45B7F6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1620AF57-49AF-4487-80A1-07627F50F817\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF373D13-0AB1-4518-AFFE-D09A5F56E992\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86483865-BFC3-4845-80DE-A6AC632A92A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A147E12-E5D4-400E-9432-BB5BCF2352CE\"}]}]}],\"references\":[{\"url\":\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/ImageMagick/ImageMagick/issues/362\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201711-07\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/3681-1/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2017/dsa-4019\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2018/dsa-4204\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/ImageMagick/ImageMagick/issues/362\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201711-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/3681-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2017/dsa-4019\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2018/dsa-4204\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-05-13T02:14:36+00:00",
      "cve": "CVE-2017-13143",
      "id": "CVE-2017-13143",
      "initial_release_date": "2017-08-23T00:00:00+00:00",
      "product_status:known_affected": "16",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "ImageMagick: Initialized data use in ReadMATImage function in coders/mat.c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-13143.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2025-10-07T10:19:56Z",
      "cve": "CVE-2017-13143",
      "id": "CVE-2017-13143",
      "initial_release_date": "2023-02-15T04:40:31Z",
      "product_status:known_not_affected": "124",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2017-13143",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2017-13143.json",
      "version": "9"
    }
  }
}

CNVD-2017-25055

Vulnerability from cnvd - Published: 2017-09-05

Title

ImageMagick信息泄露漏洞（CNVD-2017-25055）

Description

ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。 ImageMagick coders/mat.c文件的‘ReadMATImage’函数未正确初始化数据存在信息泄露漏洞，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可获取敏感信息。

Severity

中

Patch Name

ImageMagick信息泄露漏洞（CNVD-2017-25055）的补丁

Patch Description

ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。 ImageMagick coders/mat.c文件的‘ReadMATImage’函数未正确初始化数据存在信息泄露漏洞，允许远程攻击者利用漏洞构建恶意文件，诱使用户解析，可获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://github.com/ImageMagick/ImageMagick/issues/362

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-13143

Impacted products

Name
['ImageMagick ImageMagick <6.9.7-6', 'ImageMagick ImageMagick 7.*<7.0.4-6']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-13143"
    }
  },
  "description": "ImageMagick\u662f\u7f8e\u56fdImageMagick Studio\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u7684\u56fe\u8c61\u5904\u7406\u8f6f\u4ef6\u3002\r\n\r\nImageMagick coders/mat.c\u6587\u4ef6\u7684\u2018ReadMATImage\u2019\u51fd\u6570\u672a\u6b63\u786e\u521d\u59cb\u5316\u6570\u636e\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u6784\u5efa\u6076\u610f\u6587\u4ef6\uff0c\u8bf1\u4f7f\u7528\u6237\u89e3\u6790\uff0c\u53ef\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Bastien ROUCARIES \u003croucaries.bastien@gmail.com\u003e",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/ImageMagick/ImageMagick/issues/362",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-25055",
  "openTime": "2017-09-05",
  "patchDescription": "ImageMagick\u662f\u7f8e\u56fdImageMagick Studio\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u7684\u56fe\u8c61\u5904\u7406\u8f6f\u4ef6\u3002\r\n\r\nImageMagick coders/mat.c\u6587\u4ef6\u7684\u2018ReadMATImage\u2019\u51fd\u6570\u672a\u6b63\u786e\u521d\u59cb\u5316\u6570\u636e\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u6784\u5efa\u6076\u610f\u6587\u4ef6\uff0c\u8bf1\u4f7f\u7528\u6237\u89e3\u6790\uff0c\u53ef\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "ImageMagick\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-25055\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "ImageMagick ImageMagick \u003c6.9.7-6",
      "ImageMagick ImageMagick 7.*\u003c7.0.4-6"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-13143",
  "serverity": "\u4e2d",
  "submitTime": "2017-08-24",
  "title": "ImageMagick\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2017-25055\uff09"
}

FKIE_CVE-2017-13143

Vulnerability from fkie_nvd - Published: 2017-08-23 06:29 - Updated: 2026-06-17 01:04

Severity

7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

References

URL	Tags
cve@mitre.org	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012	Issue Tracking, Third Party Advisory
cve@mitre.org	https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960	Issue Tracking, Patch, Third Party Advisory
cve@mitre.org	https://github.com/ImageMagick/ImageMagick/issues/362	Issue Tracking, Patch, Third Party Advisory
cve@mitre.org	https://security.gentoo.org/glsa/201711-07
cve@mitre.org	https://usn.ubuntu.com/3681-1/
cve@mitre.org	https://www.debian.org/security/2017/dsa-4019
cve@mitre.org	https://www.debian.org/security/2018/dsa-4204
af854a3a-2127-422b-91ae-364da2661108	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012	Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960	Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://github.com/ImageMagick/ImageMagick/issues/362	Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201711-07
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/3681-1/
af854a3a-2127-422b-91ae-364da2661108	https://www.debian.org/security/2017/dsa-4019
af854a3a-2127-422b-91ae-364da2661108	https://www.debian.org/security/2018/dsa-4204

Impacted products

Vendor	Product	Version
imagemagick	imagemagick	*
imagemagick	imagemagick	7.0.1-0
imagemagick	imagemagick	7.0.1-1
imagemagick	imagemagick	7.0.1-2
imagemagick	imagemagick	7.0.1-3
imagemagick	imagemagick	7.0.1-4
imagemagick	imagemagick	7.0.1-5
imagemagick	imagemagick	7.0.1-6
imagemagick	imagemagick	7.0.1-7
imagemagick	imagemagick	7.0.1-8
imagemagick	imagemagick	7.0.1-9
imagemagick	imagemagick	7.0.1-10
imagemagick	imagemagick	7.0.2-0
imagemagick	imagemagick	7.0.2-1
imagemagick	imagemagick	7.0.2-2
imagemagick	imagemagick	7.0.2-3
imagemagick	imagemagick	7.0.2-4
imagemagick	imagemagick	7.0.2-5
imagemagick	imagemagick	7.0.2-6
imagemagick	imagemagick	7.0.2-7
imagemagick	imagemagick	7.0.2-8
imagemagick	imagemagick	7.0.2-9
imagemagick	imagemagick	7.0.2-10
imagemagick	imagemagick	7.0.3-0
imagemagick	imagemagick	7.0.3-1
imagemagick	imagemagick	7.0.3-2
imagemagick	imagemagick	7.0.3-3
imagemagick	imagemagick	7.0.3-4
imagemagick	imagemagick	7.0.3-5
imagemagick	imagemagick	7.0.3-6
imagemagick	imagemagick	7.0.3-7
imagemagick	imagemagick	7.0.3-8
imagemagick	imagemagick	7.0.3-9
imagemagick	imagemagick	7.0.3-10
imagemagick	imagemagick	7.0.4-0
imagemagick	imagemagick	7.0.4-1
imagemagick	imagemagick	7.0.4-2
imagemagick	imagemagick	7.0.4-3
imagemagick	imagemagick	7.0.4-4
imagemagick	imagemagick	7.0.4-5

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBF81B46-43DA-40F9-9F40-061B613895FB",
              "versionEndIncluding": "6.9.7-5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
              "matchCriteriaId": "693C9F8F-A8C1-4D06-8F31-E085E16E701C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D3D3DFC-8459-41BA-BF3E-AE84E48FCEE7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3E12EB4-B8F6-43A3-847D-DBC96AE10905",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
              "matchCriteriaId": "30539421-5872-4C2E-94AE-8A2B05C952C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A5B7537-8563-409D-82DE-EB07107D3C04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA648D3C-A464-4F54-8B5E-E8431531FBB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6666BB0-B211-490F-884C-BE410CD19DAF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FF2582D-1513-448B-8B61-9C4844B08324",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
              "matchCriteriaId": "E57E6BA4-A727-4CF5-B15F-76632D02617A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
              "matchCriteriaId": "C721BC6F-61DD-4ED1-8024-2946C494AEC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD319D32-FE7A-456D-AFEE-DC9F0D98652C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
              "matchCriteriaId": "09CDF263-38F5-469F-984B-9D9A223159B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "243FF3C1-D676-4D5F-A90C-3017DCBBE73A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B8BDDE6-6B38-442B-83A4-FAADBAE1C792",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DCD89B9-6A69-41DE-BE38-5E9193828279",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
              "matchCriteriaId": "139BC277-8E00-4700-8B47-6D3A3CB38B04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0FA2E18-6F7B-49D6-B60C-38851398F9B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B7F510A-A439-47A3-AF31-4BF7F74D58A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A91B94E3-33BB-46B6-A1AE-EAA9906605CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5B3DE17-08A8-457D-9AEB-BD6E04376B34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
              "matchCriteriaId": "98AD438E-28B7-4491-B58F-55FDE7F67CFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E033A09-4F2F-4957-A9A8-5C9E7D90A1CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB9B68E7-0E40-437A-A71B-0C078FE76FD8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "948D5778-AD2A-4293-AE39-A406D75F5678",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D391DECE-2408-4A8F-ACE6-F18028C422A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC773CB4-0E7B-4D73-AB9C-D7CC98C38BD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
              "matchCriteriaId": "24A0C584-9DA3-48B0-B152-67B9E0239876",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E42943C5-CC66-4E88-9085-1BD39937C09B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
              "matchCriteriaId": "E396985D-BE6A-4F4C-B294-FE69724534EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1D84944-322C-4B5D-9B1C-587301747A34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B48F5327-CA20-4756-A06F-B30B660E8DA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
              "matchCriteriaId": "84C11EC2-C798-4C3B-8E00-9C70C3499B33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
              "matchCriteriaId": "D30A3BD6-5903-42D6-A1E3-C6D2FE468A1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
              "matchCriteriaId": "441F9FAE-11FA-4976-8BB3-4A3A79B57663",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4389D4A-8AD4-421E-AD4D-6761F45B7F6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1620AF57-49AF-4487-80A1-07627F50F817",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF373D13-0AB1-4518-AFFE-D09A5F56E992",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
              "matchCriteriaId": "86483865-BFC3-4845-80DE-A6AC632A92A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A147E12-E5D4-400E-9432-BB5BCF2352CE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
    },
    {
      "lang": "es",
      "value": "En ImageMagick en versiones anteriores a la 6.9.7-6 y 7.x en versiones anteriores a la 7.0.4-6, la funci\u00f3n ReadMATImage en coders/mat.c emplea datos sin inicializar, lo que podr\u00eda permitir que atacantes remotos obtengan informaci\u00f3n sensible de la memoria de proceso."
    }
  ],
  "id": "CVE-2017-13143",
  "lastModified": "2026-06-17T01:04:36.947",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-08-23T06:29:00.340",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.gentoo.org/glsa/201711-07"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/3681-1/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.debian.org/security/2017/dsa-4019"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.debian.org/security/2018/dsa-4204"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201711-07"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/3681-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.debian.org/security/2017/dsa-4019"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.debian.org/security/2018/dsa-4204"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-XP5J-HRQW-XVPC

Vulnerability from github – Published: 2022-05-14 03:18 – Updated: 2025-04-20 03:43

Details

Severity

7.5 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-13143"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-08-23T06:29:00Z",
    "severity": "HIGH"
  },
  "details": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.",
  "id": "GHSA-xp5j-hrqw-xvpc",
  "modified": "2025-04-20T03:43:44Z",
  "published": "2022-05-14T03:18:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-13143"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
    },
    {
      "type": "WEB",
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201711-07"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3681-1"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2017/dsa-4019"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2018/dsa-4204"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2017-13143

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2017-13143

Aliases

CVE-2017-13143

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-13143",
    "description": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.",
    "id": "GSD-2017-13143",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-13143.html",
      "https://www.debian.org/security/2018/dsa-4204",
      "https://www.debian.org/security/2017/dsa-4019",
      "https://ubuntu.com/security/CVE-2017-13143",
      "https://advisories.mageia.org/CVE-2017-13143.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-13143"
      ],
      "details": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.",
      "id": "GSD-2017-13143",
      "modified": "2023-12-13T01:21:01.758889Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2017-13143",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960",
            "refsource": "CONFIRM",
            "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
          },
          {
            "name": "USN-3681-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/3681-1/"
          },
          {
            "name": "GLSA-201711-07",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201711-07"
          },
          {
            "name": "DSA-4019",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2017/dsa-4019"
          },
          {
            "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012",
            "refsource": "CONFIRM",
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
          },
          {
            "name": "DSA-4204",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2018/dsa-4204"
          },
          {
            "name": "https://github.com/ImageMagick/ImageMagick/issues/362",
            "refsource": "CONFIRM",
            "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.9.7-5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-13143"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ImageMagick/ImageMagick/issues/362",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/ImageMagick/ImageMagick/issues/362"
            },
            {
              "name": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/ImageMagick/ImageMagick/commit/51b0ae01709adc1e4a9245e158ef17b85a110960"
            },
            {
              "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870012"
            },
            {
              "name": "DSA-4019",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "https://www.debian.org/security/2017/dsa-4019"
            },
            {
              "name": "GLSA-201711-07",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201711-07"
            },
            {
              "name": "DSA-4204",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "https://www.debian.org/security/2018/dsa-4204"
            },
            {
              "name": "USN-3681-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/3681-1/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2018-06-14T01:29Z",
      "publishedDate": "2017-08-23T06:29Z"
    }
  }
}

ubuntu-cve-2017-13143

Vulnerability from osv_ubuntu

Published

2017-08-23 00:00

Modified

2026-04-22 07:38

Summary

Details

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2017-13143	REPORT
	https://ubuntu.com/security/notices/USN-3681-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2017-13143	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "imagemagick",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "libmagick++5",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "libmagickcore5",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "libmagickcore5-extra",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "libmagickwand5",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          },
          {
            "binary_name": "perlmagick",
            "binary_version": "8:6.7.7.10-6ubuntu3.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "imagemagick",
        "purl": "pkg:deb/ubuntu/imagemagick@8:6.7.7.10-6ubuntu3.11?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8:6.7.7.10-6ubuntu3.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8:6.7.7.10-5ubuntu3",
        "8:6.7.7.10-5ubuntu4",
        "8:6.7.7.10-6ubuntu1",
        "8:6.7.7.10-6ubuntu2",
        "8:6.7.7.10-6ubuntu3",
        "8:6.7.7.10-6ubuntu3.1",
        "8:6.7.7.10-6ubuntu3.2",
        "8:6.7.7.10-6ubuntu3.3",
        "8:6.7.7.10-6ubuntu3.4",
        "8:6.7.7.10-6ubuntu3.5",
        "8:6.7.7.10-6ubuntu3.6",
        "8:6.7.7.10-6ubuntu3.7",
        "8:6.7.7.10-6ubuntu3.8",
        "8:6.7.7.10-6ubuntu3.9"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "imagemagick",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagick++-6.q16-5v5",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickcore-6.q16-2",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickcore-6.q16-2-extra",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "libmagickwand-6.q16-2",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          },
          {
            "binary_name": "perlmagick",
            "binary_version": "8:6.8.9.9-7ubuntu5.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "imagemagick",
        "purl": "pkg:deb/ubuntu/imagemagick@8:6.8.9.9-7ubuntu5.11?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8:6.8.9.9-7ubuntu5.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8:6.8.9.9-5ubuntu2",
        "8:6.8.9.9-6",
        "8:6.8.9.9-6build1",
        "8:6.8.9.9-7",
        "8:6.8.9.9-7ubuntu1",
        "8:6.8.9.9-7ubuntu2",
        "8:6.8.9.9-7ubuntu3",
        "8:6.8.9.9-7ubuntu4",
        "8:6.8.9.9-7ubuntu5",
        "8:6.8.9.9-7ubuntu5.1",
        "8:6.8.9.9-7ubuntu5.2",
        "8:6.8.9.9-7ubuntu5.3",
        "8:6.8.9.9-7ubuntu5.4",
        "8:6.8.9.9-7ubuntu5.5",
        "8:6.8.9.9-7ubuntu5.6",
        "8:6.8.9.9-7ubuntu5.7",
        "8:6.8.9.9-7ubuntu5.8",
        "8:6.8.9.9-7ubuntu5.9"
      ]
    }
  ],
  "aliases": [],
  "details": "In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.",
  "id": "UBUNTU-CVE-2017-13143",
  "modified": "2026-04-22T07:38:20Z",
  "published": "2017-08-23T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2017-13143"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3681-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-13143"
    }
  ],
  "related": [
    "USN-3681-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2017-13143"
  ]
}

WID-SEC-W-2024-0171

Vulnerability from csaf_certbund - Published: 2017-08-22 22:00 - Updated: 2024-03-19 23:00

Summary

ImageMagick: Mehrere Schwachstellen

Severity

Hoch

Scope

17 vulnerabilities in this advisory, including CVE-2017-13143.

CVE-2017-13143

In ImageMagick existieren mehrere Schwachstellen. Die Schwachstellen existieren in den Funktionen "WritePCXImage", "WriteOneJNGImage", "WritePDFImage", "ReadPSDLayersInternal", "ReadOnePNGImage", "ReadMIFFImage", "ReadMATImage", "ReadJP2Image", "ReadOneMNGImage", "SFWScan", "formatIPTC" und "load_level". Durch fehlende Speicherinitialisierungen und Validierungen können durch präparierte Bilddateien diverse Speicherlecks ausgenutzt werden. Ein entfernter, anonymer Angreifer kann so Zugriff auf eventuell sensitive Informationen erlangen und einen Denial of Service Zustand herbeiführen. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer den Benutzer dazu bringen, eine modifizierte Bilddatei hochzuladen.

Known affected: 5 products

Open the full advisory

WID-SEC-W-2024-0172

Vulnerability from csaf_certbund - Published: 2017-08-06 22:00 - Updated: 2024-08-22 22:00

Summary

ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service

Severity

Mittel

Scope

24 vulnerabilities in this advisory, including CVE-2017-13143.

CVE-2017-13143

Es existieren mehrere Schwachstellen in ImageMagick. Die Schwachstellen befinden sich in verschiedenen Funktionen und werden u. a. durch Speicherbeschädigungen und "use-after-free" Fehler verursacht. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchführen. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen muss der Angreifer den Benutzer dazu bringen, eine modifizierte Datei zu öffnen.

Known affected: 4 products Last affected: 1 product

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2017-13143 (GCVE-0-2017-13143)

CNVD-2017-25055

FKIE_CVE-2017-13143

GHSA-XP5J-HRQW-XVPC

GSD-2017-13143

ubuntu-cve-2017-13143

Vulnerability from osv_ubuntu

WID-SEC-W-2024-0171

WID-SEC-W-2024-0172

Tags

Sightings

Nomenclature

Related by attack behaviour