Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-27757

Опубликовано: 08 дек. 2020
Источник: ubuntu
Приоритет: low
CVSS2: 4.3
CVSS3: 3.3

Описание

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.

РелизСтатусПримечание
bionic

released

8:6.9.7.4+dfsg-16ubuntu6.11
devel

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-apps/focal

released

8:6.9.10.23+dfsg-2.1ubuntu11.4
esm-apps/jammy

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-apps/noble

not-affected

8:6.9.11.60+dfsg-1ubuntu1
esm-infra-legacy/trusty

needed

esm-infra/bionic

released

8:6.9.7.4+dfsg-16ubuntu6.11
esm-infra/xenial

needed

focal

released

8:6.9.10.23+dfsg-2.1ubuntu11.4
groovy

released

8:6.9.10.23+dfsg-2.1ubuntu13.3

Показывать по

4.3 Medium

CVSS2

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
больше 6 лет назад

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 3.3
nvd
около 5 лет назад

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 3.3
debian
около 5 лет назад

A floating point math calculation in ScaleAnyToQuantum() of /MagickCor ...

CVSS3: 3.3
github
больше 3 лет назад

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость функции ScaleAnyToQuantum() компонента /MagickCore/quantum-private.h консольного графического редактора ImageMagick, связанная с целочисленным переполнением значения, позволяющая нарушителю вызвать отказ в обслуживании

4.3 Medium

CVSS2

3.3 Low

CVSS3