← Back

CVE-2017-18209

nvd nist
Published: Mar 1, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.

Affected (30)

1 product
Imagemagick
1 product
Ubuntu Linux
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Imagemagick
Version 7.0.7-0
Version 7.0.7-10
Version 7.0.7-11
Version 7.0.7-12
Version 7.0.7-13
Version 7.0.7-14
Version 7.0.7-15
Version 7.0.7-16
Version 7.0.7-17
Version 7.0.7-18
Version 7.0.7-19
Version 7.0.7-1
Version 7.0.7-20
Version 7.0.7-21
Version 7.0.7-22
Version 7.0.7-23
Version 7.0.7-24
Version 7.0.7-25
Version 7.0.7-2
Version 7.0.7-3
Version 7.0.7-4
Version 7.0.7-5
Version 7.0.7-6
Version 7.0.7-8
Version 7.0.7-9
Version 7.0.7.7
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 14.04
Version 16.04
Version 17.10
Version 18.04

References (8)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.