CVE-2014-9853

MEDIUM

ImageMagick - DoS

Title source: llm

Description

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.

References (11)

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html

[Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00028.html

[Mailing List, Patch] http://www.openwall.com/lists/oss-security/2016/06/02/13

[Third Party Advisory] http://www.ubuntu.com/usn/USN-3131-1

[Issue Tracking, Patch] https://bugzilla.redhat.com/show_bug.cgi?id=1343513

Scores

CVSS v3 5.5

EPSS 0.0016

EPSS Percentile 36.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-399

Status published

Affected Products (16)

imagemagick/imagemagick < 6.9.4-0

suse/linux_enterprise_debuginfo

novell/leap

opensuse/leap

opensuse/opensuse

opensuse_project/suse_linux_enterprise_software_development_kit

suse/linux_enterprise_desktop

suse/linux_enterprise_server

suse/linux_enterprise_server

suse/linux_enterprise_software_development_kit

suse/linux_enterprise_workstation_extension

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

... and 1 more

Timeline

Published Mar 17, 2017

Tracked Since Feb 18, 2026