CVE-2020-27768
published 2021-02-23CVE-2020-27768: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick…
PriorityP411low3.3CVSS 3.1
AVLACLPRNUIRSUCNINAL
EPSS
1.36%
68.9th percentile
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | imagemagick | < imagemagick 8:6.9.11.24+dfsg-1 (bookworm) | imagemagick 8:6.9.11.24+dfsg-1 (bookworm) |
| imagemagick | imagemagick | < 7.0.9-0 | 7.0.9-0 |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.24+dfsg-1 | 8:6.9.11.24+dfsg-1 |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
ImageMagick vulnerabilities
vendor_ubuntu·2024-10-15
CVE-2019-7398 ImageMagick vulnerabilities
Title: ImageMagick vulnerabilities
Summary: Several security issues were fixed in ImageMagick.
It was discovered that ImageMagick incorrectly handled certain
malformed image files. If a user or automated system using ImageMagick
were tricked into processing a specially crafted file, an attacker could
exploit this to cause a denial of service or affect the reliability of the
system. The vulnerabilities included memory leaks, buffer overflows, and
improper handling of pixel data.
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
ImageMagick vulnerabilities
vendor_ubuntu·2021-06-15
CVE-2020-27757 ImageMagick vulnerabilities
Title: ImageMagick vulnerabilities
Summary: Several security issues were fixed in ImageMagick.
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2020-27768: imagemagick - In ImageMagick, there is an outside the range of representable values of type 'u...
vendor_debian·2020·CVSS 3.3
CVE-2020-27768 [LOW] CVE-2020-27768: imagemagick - In ImageMagick, there is an outside the range of representable values of type 'u...
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
Scope: local
bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1)
bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1)
forky: resolved (fixed in 8:6.9.11.24+dfsg-1)
sid: resolved (fixed in 8:6.9.11.24+dfsg-1)
trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)
Red Hat
ImageMagick: outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
vendor_redhat·2019-10-13·CVSS 3.3
CVE-2020-27768 [LOW] CWE-190 ImageMagick: outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
ImageMagick: outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h.
Statement: This flaw is out of support scope for Red Hat Enterprise Linux 5, 6, and 7. Inkscape is not affected because it no longer uses a bundled ImageMagick in Red Hat Enterprise Linux 8. For more information regarding support scopes, please see https://access.redhat.com/support/policy/updates/errata .
Package: ImageMagick (Red Hat Enterprise Linux 5) - Out of support sco
GHSA
GHSA-gmwp-vj4h-cq95: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private
ghsa_unreviewed·2022-05-24
CVE-2020-27768 [MEDIUM] CWE-190 GHSA-gmwp-vj4h-cq95: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
OSV
CVE-2020-27768: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private
osv·2021-02-23·CVSS 3.3
CVE-2020-27768 [LOW] CVE-2020-27768: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
No detection rules found.
No public exploits indexed.
https://bugzilla.redhat.com/show_bug.cgi?id=1894689https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlhttps://lists.debian.org/debian-lts-announce/2023/03/msg00008.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1894689https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlhttps://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
2021-02-23
Published