A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7068-1 advisory.

    It was discovered that ImageMagick incorrectly handled certain

    malformed image files. If a user or automated system using ImageMagick were tricked into processing a     specially crafted file, an attacker could exploit this to cause a denial of service or affect the     reliability of the system. The vulnerabilities included memory leaks, buffer overflows, and improper     handling of pixel data.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5335-1 advisory.

    It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or     large images. If a user or automated system using ImageMagick were tricked into opening a specially     crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with     the privileges of the user invoking the program. (CVE-2020-19667, CVE-2017-13144)

    Suhwan Song discovered that ImageMagick incorrectly handled memory when processing PNG,PALM,MIFF image     data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image,     an attacker could exploit this to cause a denial of service or possibly execute code with the privileges     of the user invoking the program. (CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)

    Suhwan Song discovered that ImageMagick incorrectly handled certain values when processing image data. If     a user or automated system using ImageMagick were tricked into opening a specially crafted image, an     attacker could exploit this to cause a denial of service. (CVE-2020-25676, CVE-2020-27750, CVE-2020-27760,     CVE-2020-27762, CVE-2020-27766, CVE-2020-27770)

    Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values when processing image data.
    If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an     attacker could exploit this to cause a denial of service. (CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4988-1 advisory.

    It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or     automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could     exploit this to cause a denial of service or possibly execute code with the privileges of the user     invoking the program.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security vulnerabilities were found in Imagemagick. Missing or incomplete input sanitizing may lead to undefined behavior which can result in denial of service (application crash) or other unspecified impact.

For Debian 9 stretch, these problems have been fixed in version 8:6.9.7.4+dfsg-11+deb9u12.

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40     mishandles the -authenticate option, which allows     setting a password for password-protected PDF files.
    The user-controlled password was not properly     escaped/sanitized and it was therefore possible to     inject additional shell commands via     coders/pdf.c.(CVE-2020-29599)

  - A flaw was found in ImageMagick in     MagickCore/statistic.c. An attacker who submits a     crafted file that is processed by ImageMagick could     trigger undefined behavior in the form of values     outside the range of type `unsigned long`. This would     most likely lead to an impact to application     availability, but could potentially cause other     problems related to undefined behavior. This flaw     affects ImageMagick versions prior to     7.0.8-69.(CVE-2020-27766)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote     attackers to cause a denial of service (use-after-free     and application crash) or possibly have unspecified     other impact by crafting a Matlab image file that is     mishandled in ReadImage in     MagickCore/constitute.c.(CVE-2019-15140)

  - In ImageMagick 7.x before 7.0.8-41 and 6.x before     6.9.10-41, there is a divide-by-zero vulnerability in     the MeanShiftImage function. It allows an attacker to     cause a denial of service by sending a crafted     file.(CVE-2019-14981)

  - ImageMagick 7.0.8-35 has a memory leak in     magick/xwindow.c, related to     XCreateImage.(CVE-2019-16708)

  - ImageMagick 7.0.8-35 has a memory leak in coders/dps.c,     as demonstrated by XCreateImage.(CVE-2019-16709)

  - ImageMagick 7.0.8-35 has a memory leak in coders/dot.c,     as demonstrated by AcquireMagickMemory in     MagickCore/memory.c.(CVE-2019-16710)

  - ImageMagick 7.0.8-40 has a memory leak in     Huffman2DEncodeImage in coders/ps2.c.(CVE-2019-16711)

  - In ImageMagick 7.0.8-43 Q16, there is a heap-based     buffer overflow in the function WriteSGIImage of     coders/sgi.c.(CVE-2019-19948)

  - In ImageMagick 7.0.8-43 Q16, there is a heap-based     buffer over-read in the function WritePNGImage of     coders/png.c, related to Magick_png_write_raw_profile     and LocaleNCompare.(CVE-2019-19949)

  - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based     buffer over-read in BlobToStringInfo in     MagickCore/string.c during TIFF image     decoding.(CVE-2020-13902)

  - In ImageMagick 7.0.5-7 Q16, an assertion failure was     found in the function LockSemaphoreInfo, which allows     attackers to cause a denial of service via a crafted     file.(CVE-2017-9501)

  - When ImageMagick 7.0.6-1 processes a crafted file in     convert, it can lead to a heap-based buffer over-read     in the WriteUILImage() function in     coders/uil.c.(CVE-2017-11533)

  - Null Pointer Dereference in the IdentifyImage function     in MagickCore/identify.c in ImageMagick through     7.0.6-10 allows an attacker to perform denial of     service by sending a crafted image     file.(CVE-2017-13768)

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40     mishandles the -authenticate option, which allows     setting a password for password-protected PDF files.
    The user-controlled password was not properly     escaped/sanitized and it was therefore possible to     inject additional shell commands via     coders/pdf.c.(CVE-2020-29599)

  - A flaw was found in ImageMagick in     MagickCore/statistic.c. An attacker who submits a     crafted file that is processed by ImageMagick could     trigger undefined behavior in the form of values     outside the range of type `unsigned long`. This would     most likely lead to an impact to application     availability, but could potentially cause other     problems related to undefined behavior. This flaw     affects ImageMagick versions prior to     7.0.8-69.(CVE-2020-27766)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in ImageMagick in     MagickCore/statistic.c. An attacker who submits a     crafted file that is processed by ImageMagick could     trigger undefined behavior in the form of values     outside the range of type `unsigned long`. This would     most likely lead to an impact to application     availability, but could potentially cause other     problems related to undefined behavior. This flaw     affects ImageMagick versions prior to     7.0.8-69.(CVE-2020-27766)

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40     mishandles the -authenticate option, which allows     setting a password for password-protected PDF files.
    The user-controlled password was not properly     escaped/sanitized and it was therefore possible to     inject additional shell commands via     coders/pdf.c.(CVE-2020-29599)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

  - CVE-2020-19667: Fixed a stack-based buffer overflow in     XPM coder could result in a crash (bsc#1179103).

  - CVE-2020-25664: Fixed a heap-based buffer overflow in     PopShortPixel (bsc#1179202).

  - CVE-2020-25665: Fixed a heap-based buffer overflow in     WritePALMImage (bsc#1179208).

  - CVE-2020-25666: Fixed an outside the range of     representable values of type 'int' and signed integer     overflow (bsc#1179212).

  - CVE-2020-25674: Fixed a heap-based buffer overflow in     WriteOnePNGImage (bsc#1179223).

  - CVE-2020-25675: Fixed an outside the range of     representable values of type 'long' and integer overflow     (bsc#1179240).

  - CVE-2020-25676: Fixed an outside the range of     representable values of type 'long' and integer overflow     at MagickCore/pixel.c (bsc#1179244).

  - CVE-2020-27750: Fixed a division by zero in     MagickCore/colorspace-private.h (bsc#1179260).

  - CVE-2020-27751: Fixed an integer overflow in     MagickCore/quantum-export.c (bsc#1179269).

  - CVE-2020-27752: Fixed a heap-based buffer overflow in     PopShortPixel in MagickCore/quantum-private.h     (bsc#1179346).

  - CVE-2020-27753: Fixed memory leaks in     AcquireMagickMemory function (bsc#1179397).

  - CVE-2020-27754: Fixed an outside the range of     representable values of type 'long' and signed integer     overflow at MagickCore/quantize.c (bsc#1179336).

  - CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory     function in ImageMagick/MagickCore/memory.c     (bsc#1179345).

  - CVE-2020-27756: Fixed a division by zero at     MagickCore/geometry.c (bsc#1179221).

  - CVE-2020-27757: Fixed an outside the range of     representable values of type 'unsigned long long' at     MagickCore/quantum-private.h (bsc#1179268).

  - CVE-2020-27758: Fixed an outside the range of     representable values of type 'unsigned long long'     (bsc#1179276).

  - CVE-2020-27759: Fixed an outside the range of     representable values of type 'int' at     MagickCore/quantize.c (bsc#1179313).

  - CVE-2020-27760: Fixed a division by zero at     MagickCore/enhance.c (bsc#1179281).

  - CVE-2020-27761: Fixed an outside the range of     representable values of type 'unsigned long' at     coders/palm.c (bsc#1179315).

  - CVE-2020-27762: Fixed an outside the range of     representable values of type 'unsigned char'     (bsc#1179278).

  - CVE-2020-27763: Fixed a division by zero at     MagickCore/resize.c (bsc#1179312).

  - CVE-2020-27764: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179317).

  - CVE-2020-27765: Fixed a division by zero at     MagickCore/segment.c (bsc#1179311).

  - CVE-2020-27766: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179361).

  - CVE-2020-27767: Fixed an outside the range of     representable values of type 'float' at     MagickCore/quantum.h (bsc#1179322).

  - CVE-2020-27768: Fixed an outside the range of     representable values of type 'unsigned int' at     MagickCore/quantum-private.h (bsc#1179339).

  - CVE-2020-27769: Fixed an outside the range of     representable values of type 'float' at     MagickCore/quantize.c (bsc#1179321).

  - CVE-2020-27770: Fixed an unsigned offset overflowed at     MagickCore/string.c (bsc#1179343).

  - CVE-2020-27771: Fixed an outside the range of     representable values of type 'unsigned char' at     coders/pdf.c (bsc#1179327).

  - CVE-2020-27772: Fixed an outside the range of     representable values of type 'unsigned int' at     coders/bmp.c (bsc#1179347).

  - CVE-2020-27773: Fixed a division by zero at     MagickCore/gem-private.h (bsc#1179285).

  - CVE-2020-27774: Fixed an integer overflow at     MagickCore/statistic.c (bsc#1179333).

  - CVE-2020-27775: Fixed an outside the range of     representable values of type 'unsigned char' at     MagickCore/quantum.h (bsc#1179338).

  - CVE-2020-27776: Fixed an outside the range of     representable values of type 'unsigned long' at     MagickCore/statistic.c (bsc#1179362).

  - CVE-2020-29599: Fixed a shell command injection in
    -authenticate (bsc#1179753).

This update was imported from the SUSE:SLE-15:Update update project.

This update for ImageMagick fixes the following issues :

CVE-2020-19667: Fixed a stack-based buffer overflow in XPM coder could result in a crash (bsc#1179103).

CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).

CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).

CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).

CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).

CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).

CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).

CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).

CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).

CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).

CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).

CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).

CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).

CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).

CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).

CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).

CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).

CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).

CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).

CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).

CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).

CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).

CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).

CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).

CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).

CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).

CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).

CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).

CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).

CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).

CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).

CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based     buffer over-read in BlobToStringInfo in     MagickCore/string.c during TIFF image     decoding.(CVE-2020-13902)

  - ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40     mishandles the -authenticate option, which allows     setting a password for password-protected PDF files.
    The user-controlled password was not properly     escaped/sanitized and it was therefore possible to     inject additional shell commands via     coders/pdf.c.(CVE-2020-29599)

  - A flaw was found in ImageMagick in     MagickCore/statistic.c. An attacker who submits a     crafted file that is processed by ImageMagick could     trigger undefined behavior in the form of values     outside the range of type `unsigned long`. This would     most likely lead to an impact to application     availability, but could potentially cause other     problems related to undefined behavior. This flaw     affects ImageMagick versions prior to     7.0.8-69.(CVE-2020-27766)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).

CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).

CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).

CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).

CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).

CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).

CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).

CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).

CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).

CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).

CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).

CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).

CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).

CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).

CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).

CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).

CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).

CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).

CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).

CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).

CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).

CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).

CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).

CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).

CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).

CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).

CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).

CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).

CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).

CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).

CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).

CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).

CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

CVE-2020-19667: Fixed a stack-based buffer overflow in XPM coder could result in a crash (bsc#1179103).

CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).

CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).

CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).

CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).

CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).

CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).

CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).

CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).

CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).

CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).

CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).

CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).

CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).

CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).

CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).

CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).

CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).

CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).

CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).

CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).

CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).

CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).

CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).

CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).

CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).

CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).

CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).

CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).

CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).

CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).

CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).

CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).

CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).

CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
209023	Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-7068-1)	Nessus	Ubuntu Local Security Checks	high
159107	Ubuntu 16.04 ESM : ImageMagick vulnerabilities (USN-5335-1)	Nessus	Ubuntu Local Security Checks	high
150793	Ubuntu 18.04 LTS / 20.04 LTS : ImageMagick vulnerabilities (USN-4988-1)	Nessus	Ubuntu Local Security Checks	high
148080	Debian DLA-2602-1 : imagemagick security update	Nessus	Debian Local Security Checks	high
148047	EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2021-1682)	Nessus	Huawei Local Security Checks	high
146668	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2021-1305)	Nessus	Huawei Local Security Checks	critical
145752	EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2021-1147)	Nessus	Huawei Local Security Checks	high
145394	openSUSE Security Update : ImageMagick (openSUSE-2021-148)	Nessus	SuSE Local Security Checks	high
145363	SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0199-1)	Nessus	SuSE Local Security Checks	high
145361	openSUSE Security Update : ImageMagick (openSUSE-2021-136)	Nessus	SuSE Local Security Checks	high
145211	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2021-1074)	Nessus	Huawei Local Security Checks	high
145198	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0153-1)	Nessus	SuSE Local Security Checks	high
145181	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0156-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-27766

high

Tenable Plugins

high

high

high

high

high

critical

high

high

high

high

high

high

high