Lucene search

CVE-2020-27770

🗓️ 04 Dec 2020 15:10:15Reported by redhatType

cve🔗 web.nvd.nist.gov👁 159 Views🌐 2 Media mentions

Due to missing check for 0 value of `replace_extent`, potential offset overflow in SubstituteString(), affecting ImageMagick versions prior to 7.0.8-68

Reporter	Title	Published	Views	Family All 51
Prion	Design/Logic Flaw	4 Dec 202015:15	–	prion
RedhatCVE	CVE-2020-27770	24 Nov 202019:54	–	redhatcve
Cvelist	CVE-2020-27770	4 Dec 202000:00	–	cvelist
Veracode	Missing Zero Check	6 Dec 202004:01	–	veracode
Debian CVE	CVE-2020-27770	4 Dec 202015:15	–	debiancve
NVD	CVE-2020-27770	4 Dec 202015:15	–	nvd
OSV	CVE-2020-27770	4 Dec 202015:15	–	osv
OSV	imagemagick vulnerabilities	18 Mar 202211:18	–	osv
OSV	imagemagick - security update	22 Mar 202100:00	–	osv
OSV	ImageMagick-7.1.0.9-1.1 on GA media	15 Jun 202400:00	–	osv

Nvd

Vulners

Node

imagemagick imagemagickRange<6.9.10-68

imagemagick imagemagickRange7.0.0-0–7.0.8-68

Node

debian debian_linuxMatch9.0

[
  {
    "vendor": "n/a",
    "product": "ImageMagick",
    "versions": [
      {
        "version": "ImageMagick 7.0.8-68",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2023/03/msg00008.html
lists	www.lists.debian.org/debian-lts-announce/2021/03/msg00030.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Dec 2020 15:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS24.3

CVSS35.5

EPSS0.001

CWE-190