A flaw was found in ImageMagick 7.0.7-12 Q16, a memory leak vulnerability in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file. [REFERENCES] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-17882 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17882 [UPSTREAM BUG] https://github.com/ImageMagick/ImageMagick/issues/880 [TESTCASE] https://github.com/henices/pocs/raw/master/NewSplayTree-memory-leaks [UPSTREAM PATCH] https://github.com/ImageMagick/ImageMagick/commit/92fbef516b94ed96fa2a672831acd5dafb242ac5
Created ImageMagick tracking bugs for this issue: Affects: fedora-all [bug 1529370]