Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-29599HistoryDec 07, 2020 - 8:15 p.m.
CVE-2020-29599
2020-12-0720:15:00
Debian Security Bug Tracker
security-tracker.debian.org
18
0.001 Low
EPSS
Percentile
49.8%
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | imagemagick | <Â 8:6.9.11.57+dfsg-1 | imagemagick_8:6.9.11.57+dfsg-1_all.deb |
| Debian | 11 | all | imagemagick | <Â 8:6.9.11.57+dfsg-1 | imagemagick_8:6.9.11.57+dfsg-1_all.deb |
| Debian | 10 | all | imagemagick | <Â 8:6.9.10.23+dfsg-2.1+deb10u2 | imagemagick_8:6.9.10.23+dfsg-2.1+deb10u2_all.deb |
| Debian | 999 | all | imagemagick | <Â 8:6.9.11.57+dfsg-1 | imagemagick_8:6.9.11.57+dfsg-1_all.deb |
| Debian | 13 | all | imagemagick | <Â 8:6.9.11.57+dfsg-1 | imagemagick_8:6.9.11.57+dfsg-1_all.deb |
Related
nessus
nessus
Amazon Linux AMI : ImageMagick (ALAS-2021-1479)
2021-02-18 00:00:00
f5
f5
K87235248 : ImageMagick vulnerability CVE-2020-29599
2021-04-12 00:00:00
ubuntucve
ubuntucve
CVE-2020-29599
2020-12-07 00:00:00
osv
osv
CVE-2020-29599
2020-12-07 20:15:12
imagemagick - security update
2021-01-12 00:00:00
imagemagick vulnerabilities
2023-07-04 09:23:39
prion
prion
Default credentials
2020-12-07 20:15:00
oraclelinux
oraclelinux
ImageMagick security update
2021-01-05 00:00:00
centos
centos
ImageMagick security update
2021-02-27 14:21:05
openvas
openvas
CentOS: Security Advisory for ImageMagick (CESA-2021:0024)
2021-02-28 00:00:00
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2021-1147)
2021-02-02 00:00:00
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2021-1682)
2021-03-24 00:00:00
cloudlinux
cloudlinux
Fix of Add fix for CVE-2020-29599
2021-04-05 16:47:45
alpinelinux
alpinelinux
CVE-2020-29599
2020-12-07 20:15:00
cvelist
cvelist
CVE-2020-29599
2020-12-07 00:00:00
gentoo
gentoo
ImageMagick: Command injection
2021-01-29 00:00:00
redhat
redhat
(RHSA-2021:0024) Important: ImageMagick security update
2021-01-05 13:40:21
veracode
veracode
Injection
2020-12-12 16:40:25
redhatcve
redhatcve
CVE-2020-29599
2020-12-14 14:57:28
amazon
amazon
Important: ImageMagick
2021-02-17 00:44:00
Important: ImageMagick
2021-02-16 00:13:00
checkpoint_advisories
checkpoint_advisories
ImageMagick Command Injection (CVE-2020-29599)
2021-05-02 00:00:00
cve
cve
CVE-2020-29599
2020-12-07 20:15:00
freebsd
freebsd
ImageMagick6 -- multiple vulnerabilities
2020-12-17 00:00:00
ImageMagick7 -- multiple vulnerabilities
2020-10-27 00:00:00
debian
debian
[SECURITY] [DLA 2523-1] imagemagick security update
2021-01-12 17:44:13
[SECURITY] [DLA 3357-1] imagemagick security update
2023-03-11 19:39:50
ubuntu
ubuntu
ImageMagick vulnerabilities
2023-07-04 00:00:00
suse
suse
Security update for ImageMagick (moderate)
2021-01-24 00:00:00
Security update for ImageMagick (moderate)
2021-01-22 00:00:00