CVE-2017-14650

high-risk

Published 2017-09-21

A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.

Do I need to act?

3.0% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.1/10 High

NETWORK / HIGH complexity

Affected Products (20)

Horde Image Api

Affected Vendors

Horde

References (8)

Mailing List http://www.openwall.com/lists/oss-security/2017/09/21/4

Exploit https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b

Mailing List https://marc.info/?l=horde-announce&m=150600299528079&w=2

https://www.debian.org/security/2018/dsa-4276

Mailing List http://www.openwall.com/lists/oss-security/2017/09/21/4

Exploit https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b

Mailing List https://marc.info/?l=horde-announce&m=150600299528079&w=2

https://www.debian.org/security/2018/dsa-4276

/ 100

high-risk

Severity 24/34 · High

Exploitability 6/34 · Minimal

Exposure 21/34 · High