CVE-2014-9853: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.

Affected products

  • Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 16.10 only
  • ImageMagick ImageMagick: before 6.9.4-0 (fixed in 6.9.4-0)
  • Novell Leap: version 42.2 only
  • Opensuse Leap: version 42.1 only
  • Opensuse Opensuse: version 13.2 only
  • Opensuse Project Suse Linux Enterprise Software Development Kit: version 11.0 only
  • Suse Linux Enterprise Debuginfo: version 11 only
  • Suse Linux Enterprise Desktop: version 12 only
  • Suse Linux Enterprise Server: version 11 only; version 12 only
  • Suse Linux Enterprise Software Development Kit: version 12 only
  • Suse Linux Enterprise Workstation Extension: version 12 only

Published 2017-03-17. Last modified 2026-06-17.