PT-2019-5850 · Imagemagick+4 · Imagemagick+4

CVE-2020-27768

·

Publicado

2019-10-13

·

Atualizado

2024-10-15

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0
Description The issue is related to an integer overflow in the MagickCore/quantum-private.h component of the ImageMagick console graphic editor. This allows a remote attacker to cause a denial of service. The flaw is due to a value being outside the range of representable values of type unsigned int.
Recommendations For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the MagickCore/quantum-private.h component until a patch is available.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2023-5309
BDU:2021-03409
CVE-2020-27768
DLA-2602-1
DLA-3357-1
DLA-3357-2
OESA-2021-1110
OPENSUSE-SU-2021:0136-1
OPENSUSE-SU-2021:0148-1
OPENSUSE-SU-2021_0136-1
OPENSUSE-SU-2021_0148-1
SUSE-SU-2021:0153-1
SUSE-SU-2021:0156-1
SUSE-SU-2021:0199-1
SUSE-SU-2021:14598-1
SUSE-SU-2021_14598-1
USN-4988-1
USN-7068-1

Produtos afetados

Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu