PT-2019-5849 · Imagemagick+4 · Imagemagick+4

CVE-2020-27769

·

Publicado

2019-10-10

·

Atualizado

2024-10-15

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0
Description The issue is related to an integer overflow in the MagickCore/quantize.c component of the ImageMagick console graphic editor. This allows a remote attacker to cause a denial of service. The problem arises when values are outside the range of representable values of type 'float' at MagickCore/quantize.c.
Recommendations For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2023-5309
BDU:2021-03408
CVE-2020-27769
DLA-2602-1
DLA-3357-1
DLA-3357-2
OESA-2021-1198
OPENSUSE-SU-2021:0136-1
OPENSUSE-SU-2021:0148-1
OPENSUSE-SU-2021_0136-1
OPENSUSE-SU-2021_0148-1
SUSE-SU-2021:0153-1
SUSE-SU-2021:0156-1
SUSE-SU-2021:0199-1
SUSE-SU-2021:14598-1
SUSE-SU-2021_14598-1
USN-4988-1
USN-7068-1

Produtos afetados

Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu