Search for vulnerabilities
Vulnerability details: VCID-6zsf-bavv-aaar
Vulnerability ID VCID-6zsf-bavv-aaar
Aliases CVE-2017-13737
Summary There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
System Score Found at
generic_textual Low http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a/
generic_textual Low http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-13737.html
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01135 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01601 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01601 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01601 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.01601 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.0183 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.02174 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.02174 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.02174 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
epss 0.02369 https://api.first.org/data/v1/epss?cve=CVE-2017-13737
generic_textual Low https://bugzilla.redhat.com/show_bug.cgi?id=1484196
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
cvssv2 5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2017-13737
cvssv3 6.5 https://nvd.nist.gov/vuln/detail/CVE-2017-13737
generic_textual Medium https://ubuntu.com/security/notices/USN-4222-1
generic_textual Medium https://usn.ubuntu.com/usn/usn-4222-1
Reference id Reference type URL
http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a/
http://openwall.com/lists/oss-security/2017/08/29/4
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-13737.html
https://api.first.org/data/v1/epss?cve=CVE-2017-13737
https://bugs.debian.org/878511
https://bugzilla.redhat.com/show_bug.cgi?id=1484196
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11102
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11637
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11638
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11722
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13065
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14314
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14997
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15238
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16352
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16353
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17501
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17502
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17503
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17782
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17912
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17913
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18220
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18230
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18231
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5685
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6799
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9018
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
https://ubuntu.com/security/notices/USN-4222-1
https://usn.ubuntu.com/4222-1/
https://usn.ubuntu.com/usn/usn-4222-1
https://www.debian.org/security/2018/dsa-4321
http://www.securityfocus.com/bid/100518
878511 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878511
cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2017-13737 https://nvd.nist.gov/vuln/detail/CVE-2017-13737
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-13737
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-13737
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.85145
EPSS Score 0.01135
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.