Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-7068-1
HistoryOct 15, 2024 - 8:18 a.m.

imagemagick vulnerabilities

2024-10-1508:18:57
Google
osv.dev
8
imagemagick
vulnerabilities
denial of service
system reliability
memory leaks
buffer overflows
pixel data

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.008

Percentile

82.0%

JSON

It was discovered that ImageMagick incorrectly handled certain
malformed image files. If a user or automated system using ImageMagick
were tricked into processing a specially crafted file, an attacker could
exploit this to cause a denial of service or affect the reliability of the
system. The vulnerabilities included memory leaks, buffer overflows, and
improper handling of pixel data.

References

Related

openvas 18
nessus 21
cloudfoundry 1
ubuntu 2
osv 20
suse 4
debian 3
ubuntucve 20
prion 17
nvd 16
cve 16
debiancve 17
veracode 15
redhatcve 14
cvelist 15
openvas
openvas
Ubuntu: Security Advisory (USN-7068-1)
2024-10-15 00:00:00
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2021:0136-1)
2021-04-16 00:00:00
Ubuntu: Security Advisory (USN-4988-1)
2021-06-16 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-7068-1)
2024-10-15 00:00:00
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2021:0153-1)
2021-01-20 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : ImageMagick vulnerabilities (USN-4988-1)
2021-06-15 00:00:00
cloudfoundry
cloudfoundry
USN-4988-1: ImageMagick vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2021-06-15 00:00:00
ImageMagick vulnerabilities
2022-03-18 00:00:00
osv
osv
imagemagick vulnerabilities
2021-06-15 11:11:56
imagemagick - security update
2023-03-11 00:00:00
imagemagick - security update
2021-03-22 00:00:00
suse
suse
Security update for ImageMagick (moderate)
2021-01-22 00:00:00
Security update for ImageMagick (moderate)
2021-01-24 00:00:00
Security update for ImageMagick (moderate)
2020-11-09 00:00:00
debian
debian
[SECURITY] [DLA 3357-1] imagemagick security update
2023-03-11 19:39:30
[SECURITY] [DLA 2602-1] imagemagick security update
2021-03-23 22:55:18
[SECURITY] [DLA 2523-1] imagemagick security update
2021-01-12 17:43:56
ubuntucve
ubuntucve
CVE-2020-27766
2020-12-04 00:00:00
CVE-2020-27776
2020-12-04 00:00:00
CVE-2020-27774
2020-12-04 00:00:00
prion
prion
Stack overflow
2020-11-20 16:15:00
Input validation
2020-12-08 22:15:00
Design/Logic Flaw
2020-12-03 17:15:00
nvd
nvd
CVE-2020-27753
2020-12-08 22:15:18
CVE-2020-27755
2020-12-08 22:15:18
CVE-2020-27764
2020-12-03 17:15:13
cve
cve
CVE-2020-27755
2020-12-08 22:15:18
CVE-2020-27763
2020-12-03 17:15:12
CVE-2020-27761
2020-12-03 17:15:12
debiancve
debiancve
CVE-2020-27771
2020-12-04 15:15:10
CVE-2020-27767
2020-12-04 15:15:10
CVE-2020-19667
2020-11-20 16:15:15
veracode
veracode
Denial Of Service (DoS)
2020-12-04 04:24:44
Value Overflow
2020-12-06 04:00:49
Undefined Behavior
2020-12-06 04:01:28
redhatcve
redhatcve
CVE-2020-27765
2020-11-24 19:54:36
CVE-2020-27760
2020-11-24 19:54:07
CVE-2020-27761
2020-11-24 19:54:22
cvelist
cvelist
CVE-2020-27767
2020-12-04 00:00:00
CVE-2020-27754
2020-12-08 00:00:00
CVE-2020-27773
2020-12-04 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.008

Percentile

82.0%

JSON
Related for OSV:USN-7068-1
openvas18nessus21cloudfoundry1ubuntu2osv20suse4debian3ubuntucve20prion17nvd16cve16debiancve17veracode15redhatcve14cvelist15