CVE-2014-9851
NONE EPSS 88.4%
Published Mar 20, 20179y ago · Modified Jun 17, 20262w ago
Published Mar 20, 2017 9y ago
Last Modified Jun 17, 2026 2w ago
Description
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
Threat Intelligence
EPSS Exploit Probability
88.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 14
| Vendor | Product | Version | Range |
|---|---|---|---|
| opensuse | opensuse | 13.2 | any |
| opensuse_project | leap | 42.1 | any |
| opensuse_project | suse_linux_enterprise_debuginfo | 11.0 | any |
| opensuse_project | suse_linux_enterprise_desktop | 12.0 | any |
| opensuse_project | suse_linux_enterprise_server | 11.0 | any |
| opensuse_project | suse_linux_enterprise_server | 12.0 | any |
| opensuse_project | suse_linux_enterprise_software_development_kit | 11.0 | any |
| opensuse_project | suse_linux_enterprise_software_development_kit | 12.0 | any |
| opensuse_project | suse_linux_enterprise_workstation_extension | 12.0 | any |
| canonical | ubuntu_linux | 12.04 | any |
| canonical | ubuntu_linux | 14.04 | any |
| canonical | ubuntu_linux | 16.04 | any |
| canonical | ubuntu_linux | 16.10 | any |
| imagemagick | imagemagick | 6.8.8-9 | any |
References 8
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html
- openwall.com http://www.openwall.com/lists/oss-security/2016/06/02/13
- ubuntu.com http://www.ubuntu.com/usn/USN-3131-1
- anonscm.debian.org https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=33b2d377b94eb738011bc7d5e90ca0a16ce4d471
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1343511
Remediation
- anonscm.debian.org https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=33b2d377b94eb738011bc7d5e90ca0a16ce4d471
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1343511