CVE-2017-11722 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-11722 Interim 1 25 2025-04-23T23:29:29Z current 2021-05-30T13:59:25Z 2025-04-23T23:29:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-11722 The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Studio Onsite 1.3 GraphicsMagick ImageMagick ImageMagick-config-6-SUSE ImageMagick-config-6-upstream ImageMagick-devel libGraphicsMagick2 libMagick++-6_Q16-3 libMagick++-devel libMagick++1 libMagickCore-6_Q16-1 libMagickCore-6_Q16-1-32bit libMagickCore1 libMagickCore1-32bit libMagickWand-6_Q16-1 libMagickWand1 libMagickWand1-32bit perl-GraphicsMagick perl-PerlMagick ImageMagick as a component of SUSE Linux Enterprise Desktop 12 SP3 ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Desktop 12 SP3 ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagick++-6_Q16-3 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickCore-6_Q16-1-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Desktop 12 SP3 ImageMagick as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata ImageMagick as a component of SUSE Linux Enterprise Server 11 SP3 LTSS ImageMagick as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata libMagickCore1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libMagickCore1-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ImageMagick as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Server 12 SP1-LTSS ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS ImageMagick as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP2 libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP2 ImageMagick as a component of SUSE Linux Enterprise Server 12 SP2 ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Server 12 SP3 ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Server 12 SP3 libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP3 libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP3 ImageMagick as a component of SUSE Linux Enterprise Server 12 SP3 ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ImageMagick as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Server 12-LTSS ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Server 12-LTSS libMagickCore-6_Q16-1 as a component of SUSE Linux Enterprise Server 12-LTSS libMagickWand-6_Q16-1 as a component of SUSE Linux Enterprise Server 12-LTSS ImageMagick as a component of SUSE Linux Enterprise Server 12-LTSS GraphicsMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-PerlMagick as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 ImageMagick-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libMagick++-6_Q16-3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libMagick++-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 perl-PerlMagick as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 ImageMagick as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ImageMagick-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libMagick++-6_Q16-3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libMagick++-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 perl-PerlMagick as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ImageMagick as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libMagick++-6_Q16-3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libMagickCore-6_Q16-1-32bit as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 ImageMagick as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 ImageMagick-config-6-SUSE as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 ImageMagick-config-6-upstream as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libMagick++-6_Q16-3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libMagickCore-6_Q16-1-32bit as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 GraphicsMagick as a component of SUSE Studio Onsite 1.3 libGraphicsMagick2 as a component of SUSE Studio Onsite 1.3 The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging statement executing outside of a loop, and consequently using an invalid array index corresponding to the loop's exit condition. CVE-2017-11722 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-config-6-SUSE SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-config-6-upstream SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1 SUSE Linux Enterprise Server 11 SP1 for Teradata:ImageMagick SUSE Linux Enterprise Server 11 SP3 LTSS:ImageMagick SUSE Linux Enterprise Server 11 SP3 for Teradata:ImageMagick SUSE Linux Enterprise Server 11 SP4-LTSS:ImageMagick SUSE Linux Enterprise Server 11 SP4-LTSS:libMagickCore1 SUSE Linux Enterprise Server 11 SP4-LTSS:libMagickCore1-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:ImageMagick SUSE Linux Enterprise Server 12 SP1-LTSS:ImageMagick-config-6-SUSE SUSE Linux Enterprise Server 12 SP1-LTSS:ImageMagick-config-6-upstream SUSE Linux Enterprise Server 12 SP1-LTSS:libMagickCore-6_Q16-1 SUSE Linux Enterprise Server 12 SP1-LTSS:libMagickWand-6_Q16-1 SUSE Linux Enterprise Server 12 SP2:ImageMagick SUSE Linux Enterprise Server 12 SP2:libMagickCore-6_Q16-1 SUSE Linux Enterprise Server 12 SP2:libMagickWand-6_Q16-1 SUSE Linux Enterprise Server 12 SP3:ImageMagick SUSE Linux Enterprise Server 12 SP3:ImageMagick-config-6-SUSE SUSE Linux Enterprise Server 12 SP3:ImageMagick-config-6-upstream SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1 SUSE Linux Enterprise Server 12-LTSS:ImageMagick SUSE Linux Enterprise Server 12-LTSS:ImageMagick-config-6-SUSE SUSE Linux Enterprise Server 12-LTSS:ImageMagick-config-6-upstream SUSE Linux Enterprise Server 12-LTSS:libMagickCore-6_Q16-1 SUSE Linux Enterprise Server 12-LTSS:libMagickWand-6_Q16-1 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick SUSE Linux Enterprise Software Development Kit 12 SP2:ImageMagick-devel SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-6_Q16-3 SUSE Linux Enterprise Software Development Kit 12 SP2:libMagick++-devel SUSE Linux Enterprise Software Development Kit 12 SP2:perl-PerlMagick SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick SUSE Linux Enterprise Workstation Extension 12 SP2:ImageMagick SUSE Linux Enterprise Workstation Extension 12 SP2:libMagick++-6_Q16-3 SUSE Linux Enterprise Workstation Extension 12 SP2:libMagickCore-6_Q16-1-32bit SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-config-6-SUSE SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-config-6-upstream SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit SUSE Studio Onsite 1.3:GraphicsMagick SUSE Studio Onsite 1.3:libGraphicsMagick2 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H