CVE-2017-11524

Publication date 23 July 2017

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

6.5 · Medium

Score breakdown

Description

The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.

Read the notes from the security team

Status

Package Ubuntu Release Status
imagemagick 17.04 zesty
Fixed 8:6.9.7.4+dfsg-3ubuntu1.2
16.10 yakkety Ignored end of life
16.04 LTS xenial
Fixed 8:6.8.9.9-7ubuntu5.8
14.04 LTS trusty
Fixed 8:6.7.7.10-6ubuntu3.8

Notes

mdeslaur

This is 0235-assertion-failed-in-WriteBlob.patch

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
imagemagick

Severity score breakdown

CVSS version: CVSS v3.0

Base score 6.5 · Medium

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Other references

Access our resources on patching vulnerabilities