CVE-2020-27770MEDIUM
Description
Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
References
https://bugzilla.redhat.com/show_bug.cgi?id=1894691
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
Details
Source: MITRE
Published: 2020-12-04
Updated: 2021-03-25
Type: CWE-190
Risk Information
CVSS v2.0
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3.0
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 148080 | Debian DLA-2602-1 : imagemagick security update | Nessus | Debian Local Security Checks | medium |
| 145394 | openSUSE Security Update : ImageMagick (openSUSE-2021-148) | Nessus | SuSE Local Security Checks | medium |
| 145363 | SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2021:0199-1) | Nessus | SuSE Local Security Checks | medium |
| 145361 | openSUSE Security Update : ImageMagick (openSUSE-2021-136) | Nessus | SuSE Local Security Checks | medium |
| 145198 | SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0153-1) | Nessus | SuSE Local Security Checks | medium |
| 145181 | SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0156-1) | Nessus | SuSE Local Security Checks | medium |