Bugzilla – Bug 1057157
VUL-1: CVE-2017-14138: ImageMagick: memory leak vulnerability in ReadWEBPImage in coders/webp.c
Last modified: 2023-07-27 10:16:38 UTC
CVE-2017-14138 ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors. Upstream bug: https://github.com/ImageMagick/ImageMagick/issues/639 Upstream fix: https://github.com/ImageMagick/ImageMagick/commit/def00c720dffb57a821bd8acd77eac7b10a0568b https://github.com/ImageMagick/ImageMagick/commit/1c487cd945996a77ba611b83dc6a2ceedb89be3d References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14138 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14138 http://www.cvedetails.com/cve/CVE-2017-14138/
memory leak is source data sized, so is attacker controlled.
(In reply to Alexander Bergmann from comment #0) > https://github.com/ImageMagick/ImageMagick/commit/ > 1c487cd945996a77ba611b83dc6a2ceedb89be3d No, even if this is tagged as fix for upstream issue #639, it is followup to fix of the bug #641. See bug #1057153 for details.
Testcase does not work for me in 12/ImageMagick. $ valgrind --tool=memcheck --leak-check=full --read-var-info=yes --error-exitcode=2 --track-origins=yes --num-callers=12 --quiet identify leak-ReadWEBPImage identify: corrupt image `leak-ReadWEBPImage' @ error/webp.c/ReadWEBPImage/293. $
Neither valgrind detects an error in 43.3/GraphicsMagick.
11/GraphicsMagick and 11/ImageMagick does not have webp.c.
42.3/GraphicsMagick and 42.2/GraphicsMagick is not affected.
Submitting for: 12/ImageMagick
I believe all fixed.
SUSE-SU-2017:3388-1: An update that solves 32 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1048457,1049796,1050083,1050116,1050139,1050632,1051441,1051847,1052450,1052553,1052689,1052744,1052758,1052764,1054757,1055214,1056432,1057157,1057719,1057729,1057730,1058485,1058637,1059666,1059778,1060176,1060577,1061254,1062750,1066003,1067181,1067184,1067409 CVE References: CVE-2017-11188,CVE-2017-11478,CVE-2017-11523,CVE-2017-11527,CVE-2017-11535,CVE-2017-11640,CVE-2017-11752,CVE-2017-12140,CVE-2017-12435,CVE-2017-12587,CVE-2017-12644,CVE-2017-12662,CVE-2017-12669,CVE-2017-12983,CVE-2017-13134,CVE-2017-13769,CVE-2017-14138,CVE-2017-14172,CVE-2017-14173,CVE-2017-14175,CVE-2017-14341,CVE-2017-14342,CVE-2017-14531,CVE-2017-14607,CVE-2017-14682,CVE-2017-14733,CVE-2017-14989,CVE-2017-15217,CVE-2017-15930,CVE-2017-16545,CVE-2017-16546,CVE-2017-16669 Sources used: SUSE Linux Enterprise Workstation Extension 12-SP3 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Workstation Extension 12-SP2 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Software Development Kit 12-SP3 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Software Development Kit 12-SP2 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Server 12-SP3 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Server 12-SP2 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Desktop 12-SP3 (src): ImageMagick-6.8.8.1-71.17.1 SUSE Linux Enterprise Desktop 12-SP2 (src): ImageMagick-6.8.8.1-71.17.1
done
openSUSE-SU-2017:3420-1: An update that solves 32 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1048457,1049796,1050083,1050116,1050139,1050632,1051441,1051847,1052450,1052553,1052689,1052744,1052758,1052764,1054757,1055214,1056432,1057157,1057719,1057729,1057730,1058485,1058637,1059666,1059778,1060176,1060577,1061254,1062750,1066003,1067181,1067184,1067409 CVE References: CVE-2017-11188,CVE-2017-11478,CVE-2017-11523,CVE-2017-11527,CVE-2017-11535,CVE-2017-11640,CVE-2017-11752,CVE-2017-12140,CVE-2017-12435,CVE-2017-12587,CVE-2017-12644,CVE-2017-12662,CVE-2017-12669,CVE-2017-12983,CVE-2017-13134,CVE-2017-13769,CVE-2017-14138,CVE-2017-14172,CVE-2017-14173,CVE-2017-14175,CVE-2017-14341,CVE-2017-14342,CVE-2017-14531,CVE-2017-14607,CVE-2017-14682,CVE-2017-14733,CVE-2017-14989,CVE-2017-15217,CVE-2017-15930,CVE-2017-16545,CVE-2017-16546,CVE-2017-16669 Sources used: openSUSE Leap 42.3 (src): ImageMagick-6.8.8.1-40.1 openSUSE Leap 42.2 (src): ImageMagick-6.8.8.1-30.12.1