A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
https://bugzilla.redhat.com/show_bug.cgi?id=1894687
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
Source: MITRE
Published: 2020-12-04
Updated: 2021-03-25
Type: CWE-190
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
Base Score: 3.3
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Impact Score: 1.4
Exploitability Score: 1.8
Severity: LOW
OR
OR
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
OR
ID | Name | Product | Family | Severity |
---|---|---|---|---|
148080 | Debian DLA-2602-1 : imagemagick security update | Nessus | Debian Local Security Checks | medium |
146751 | SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0528-1) | Nessus | SuSE Local Security Checks | medium |
145394 | openSUSE Security Update : ImageMagick (openSUSE-2021-148) | Nessus | SuSE Local Security Checks | medium |
145363 | SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0199-1) | Nessus | SuSE Local Security Checks | medium |
145361 | openSUSE Security Update : ImageMagick (openSUSE-2021-136) | Nessus | SuSE Local Security Checks | medium |
145198 | SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0153-1) | Nessus | SuSE Local Security Checks | medium |
145181 | SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0156-1) | Nessus | SuSE Local Security Checks | medium |