Логотип exploitDog
bind:"GHSA-568w-cwq2-w5pj" OR bind:"CVE-2020-27754"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-568w-cwq2-w5pj" OR bind:"CVE-2020-27754"

Количество 12

Количество 12

github логотип

GHSA-568w-cwq2-w5pj

больше 3 лет назад

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
EPSS: Низкий
ubuntu логотип

CVE-2020-27754

около 5 лет назад

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
EPSS: Низкий
redhat логотип

CVE-2020-27754

больше 6 лет назад

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2020-27754

около 5 лет назад

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
EPSS: Низкий
debian логотип

CVE-2020-27754

около 5 лет назад

In IntensityCompare() of /magick/quantize.c, there are calls to PixelP ...

CVSS3: 3.3
EPSS: Низкий
fstec логотип

BDU:2021-01016

больше 6 лет назад

Уязвимость функции IntensityCompare() консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14598-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0199-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0153-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0148-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0136-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0156-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-568w-cwq2-w5pj

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2020-27754

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
0%
Низкий
около 5 лет назад
redhat логотип
CVE-2020-27754

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-27754

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

CVSS3: 3.3
0%
Низкий
около 5 лет назад
debian логотип
CVE-2020-27754

In IntensityCompare() of /magick/quantize.c, there are calls to PixelP ...

CVSS3: 3.3
0%
Низкий
около 5 лет назад
fstec логотип
BDU:2021-01016

Уязвимость функции IntensityCompare() консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
0%
Низкий
больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2021:14598-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0199-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0153-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0148-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0136-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0156-1

Security update for ImageMagick

около 5 лет назад

Уязвимостей на страницу