Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-27750

Опубликовано: 08 дек. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

РелизСтатусПримечание
bionic

released

8:6.9.7.4+dfsg-16ubuntu6.11
devel

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-apps/focal

released

8:6.9.10.23+dfsg-2.1ubuntu11.4
esm-apps/jammy

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-apps/noble

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-infra-legacy/trusty

released

8:6.7.7.10-6ubuntu3.13+esm11
esm-infra-legacy/xenial

released

8:6.8.9.9-7ubuntu5.16+esm2
esm-infra/bionic

released

8:6.9.7.4+dfsg-16ubuntu6.11
esm-infra/xenial

released

8:6.8.9.9-7ubuntu5.16+esm2
focal

released

8:6.9.10.23+dfsg-2.1ubuntu11.4

Показывать по

EPSS

Процентиль: 60%
0.00982
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
почти 7 лет назад

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 5.5
nvd
больше 5 лет назад

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 5.5
debian
больше 5 лет назад

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and ...

CVSS3: 5.5
github
больше 4 лет назад

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 5.3
fstec
почти 7 лет назад

Уязвимость функций в файлах MagickCore/colorspace-private.h и MagickCore/quantum.h консольного графического редактора ImageMagick, свзанная с ошибками деления на ноль, позволяющая нарушителю вызвать состояние отказа в обслуживании

EPSS

Процентиль: 60%
0.00982
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3