PT-2021-3555 · Unknown+5 · Imagemagick+5

Carnil · Published 2021-01-15 · Updated 2024-12-17 · CVE-2021-20241

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)

Description A flaw was found in ImageMagick in coders/jp2.c, related to the absence of a check for division by zero. This issue could allow an attacker to trigger undefined behavior in the form of math division by zero by submitting a crafted file that is processed by ImageMagick. The highest threat from this issue is to system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2021-1438

ALT-PU-2024-2243

BDU:2021-03652

CVE-2021-20241

DLA-2602-1

DLA-3429-1

MGASA-2021-0156

OESA-2021-1110

OPENSUSE-SU-2021:0377-1

OPENSUSE-SU-2021_0377-1

SUSE-SU-2021:0605-1

SUSE-SU-2021_0605-1

SUSE-SU-2023:4634-1

USN-5335-1

USN-5736-1

USN-5736-2

USN-6200-1

USN-7164-1

Affected Products

Alt Linux

Astra Linux

Imagemagick

Linuxmint

Suse

Ubuntu

References · 154

• 🔥 https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC · Exploit
• 🔥 https://github.com/voidz0r/CVE-2022-44268 · Exploit
• 🔥 https://github.com/Sybil-Scan/imagemagick-lfi-poc · Exploit
• 🔥 https://github.com/kljunowsky/CVE-2022-44268 · Exploit
• 🔥 https://github.com/entr0pie/CVE-2022-44268 · Exploit
• 🔥 https://github.com/y1nglamore/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment · Exploit
• 🔥 https://github.com/Vulnmachines/imagemagick-CVE-2022-44268 · Exploit
• 🔥 https://github.com/jnschaeffer/cve-2022-44268-detector · Exploit
• 🔥 https://github.com/agathanon/cve-2022-44268 · Exploit
• 🔥 https://github.com/PanAdamski/CVE-2022-44268-automated · Exploit
• https://github.com/ImageMagick/ImageMagick/pull/3177 · Patch
• https://ubuntu.com/security/CVE-2021-20244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20245 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5335-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32547 · Vendor Advisory