Name: CVE-2017-12563: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2017-08-05T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-12563, CWE-770, CVSS 6.5, EPSS 0.01632

In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.

CVSS Details

CVSS 3.0 Base Score: 6.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade imagemagick	Feb 25, 2019	Aug 5, 2017
Suse	—	Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bitUpgrade perl-GraphicsMagickUpgrade GraphicsMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-6_Q16-3Upgrade libMagickWand-6_Q16-1Upgrade libGraphicsMagick2Upgrade ImageMagickUpgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade libMagickCore1Upgrade perl-PerlMagickUpgrade libMagick++1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bit	Jan 4, 2018	Aug 5, 2017
Ubuntu	—	Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade imagemagick-6.q16Upgrade imagemagick	Jun 19, 2018	Aug 5, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence