CVE-2018-10177
Publication date 16 April 2018
Last updated 25 August 2025
Ubuntu priority
Description
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| imagemagick | 18.04 LTS bionic |
Fixed 8:6.9.7.4+dfsg-16ubuntu6.2
|
| 16.04 LTS xenial |
Fixed 8:6.8.9.9-7ubuntu5.11
|
|
| 14.04 LTS trusty |
Fixed 8:6.7.7.10-6ubuntu3.11
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.5 · Medium
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
Related Ubuntu Security Notices (USN)
- USN-3681-1
- ImageMagick vulnerabilities
- 12 June 2018