CVE-2014-9854: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 16.10 only
• ImageMagick ImageMagick: before 6.9.4-0 (fixed in 6.9.4-0)
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only
• Suse Linux Enterprise Server: version 11 only
• Suse Linux Enterprise Software Development Kit: version 11 only
• Suse Suse Linux Enterprise Server: version 12 only

Published 2017-03-17. Last modified 2026-06-17.