Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.
Vulnerabilities 24
-
Unscored —
A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a …
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processe…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is process…
-
Unscored —
There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be tri…
-
Unscored —
In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed va…
-
Unscored —
in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code whic…
-
Unscored —
In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditi…
-
Unscored —
A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behav…
-
Unscored —
A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cas…
-
Unscored —
In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero c…
-
Unscored —
WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outsi…
-
Unscored —
A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Ima…
-
Unscored —
In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a s…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values o…
-
Unscored —
A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed b…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
Revision history
-
#14
Neue Updates von Ubuntu aufgenommen
-
#13
Neue Updates von Debian aufgenommen
-
#12
Neue Updates von Ubuntu aufgenommen
-
#11
Neue Updates von Ubuntu aufgenommen
-
#10
Neue Updates von Debian aufgenommen
-
#9
Neue Updates von Debian aufgenommen
-
#8
Neue Updates von SUSE aufgenommen
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
CVE's ergänzt
-
#2
CVE ergänzt
-
#1
Initiale Fassung
References
-
Debian Security Advisory DLA-2602 vom 2021-03-24
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
-
Debian Security Advisory DLA-2672 vom 2021-06-03
https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27759
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27760
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27761
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27762
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27763
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27764
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27765
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27766
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27767
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27772
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27773
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27774
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27775
-
NIST Vulnerability Database vom 2020-12-06
https://nvd.nist.gov/vuln/detail/CVE-2020-27776
-
Debian Security Advisory DLA-2523 vom 2021-01-12
https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html
-
SUSE Security Update SUSE-SU-2021:14598-1 vom 2021-01-15
https://lists.suse.com/pipermail/sle-security-updates/2021-January/008218.html
-
SUSE Security Update SUSE-SU-2021:0153-1 vom 2021-01-15
https://lists.suse.com/pipermail/sle-security-updates/2021-January/008217.html
-
SUSE Security Update SUSE-SU-2021:0156-1 vom 2021-01-18
https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html
-
SUSE Security Update SUSE-SU-2021:0199-1 vom 2021-01-22
https://lists.suse.com/pipermail/sle-security-updates/2021-January/008240.html
-
SUSE Security Update SUSE-SU-2021:0528-1 vom 2021-02-19
https://lists.suse.com/pipermail/sle-security-updates/2021-February/008351.html
-
Ubuntu Security Notice USN-4988-1 vom 2021-06-15
https://ubuntu.com/security/notices/USN-4988-1
-
Ubuntu Security Notice USN-5335-1 vom 2022-03-21
https://ubuntu.com/security/notices/USN-5335-1
-
Debian Security Advisory DLA-3357 vom 2023-03-11
https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
-
Ubuntu Security Notice USN-7068-1 vom 2024-10-15
https://ubuntu.com/security/notices/USN-7068-1