CVE-2017-6499

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3358f060fc182551822576b2c0a8850faab5d543

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 3492.0,
                "function_hash": "248660036944386108087793670833917111321"
            },
            "source": "https://github.com/imagemagick/imagemagick/commit/3358f060fc182551822576b2c0a8850faab5d543",
            "signature_type": "Function",
            "target": {
                "function": "Magick::throwException",
                "file": "Magick++/lib/Exception.cpp"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2017-6499-8cc4e5e2"
        },
        {
            "digest": {
                "line_hashes": [
                    "6058760152057690314957711263477748557",
                    "222437857192992042891852274709053450949",
                    "50242467735298415675732450125462585538",
                    "147686671176218989504610134138533084043",
                    "220932942829007231307659732853770545817",
                    "37221708634744324167224626411514613768",
                    "220604776083631158661753124968767850186",
                    "242680235252163597621729696455996227181",
                    "183140778294923579858367659229865297313"
                ],
                "threshold": 0.9
            },
            "source": "https://github.com/imagemagick/imagemagick/commit/3358f060fc182551822576b2c0a8850faab5d543",
            "signature_type": "Line",
            "target": {
                "file": "Magick++/lib/Exception.cpp"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "CVE-2017-6499-b8e2ce33"
        }
    ]
}