CVE-2017-14173

Name	CVE-2017-14173
Description	In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-1131-1, DLA-1785-1
NVD severity	medium
Debian Bugs	875504

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
imagemagick (PTS)	jessie	8:6.8.9.9-5+deb8u12	vulnerable
	jessie (security)	8:6.8.9.9-5+deb8u18	fixed
	stretch, stretch (security)	8:6.9.7.4+dfsg-11+deb9u7	vulnerable
	bullseye, sid, buster	8:6.9.10.23+dfsg-2.1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
imagemagick	source	(unstable)	8:6.9.9.34+dfsg-3	low		875504
imagemagick	source	jessie	8:6.8.9.9-5+deb8u16		DLA-1785-1
imagemagick	source	wheezy	8:6.7.7.10-5+deb7u17		DLA-1131-1

Notes

[stretch] - imagemagick <ignored> (Minor issue)
https://github.com/ImageMagick/ImageMagick/issues/713
ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/48bcf7c39302cdf9b0d9202ad03bf1b95152c44d