Ubuntu.comUB:CVE-2020-27752CVE-2020-27752
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.001 Low
EPSS
Percentile
32.4%
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An
attacker who submits a crafted file that is processed by ImageMagick could
trigger a heap buffer overflow. This would most likely lead to an impact to
application availability, but could potentially lead to an impact to data
integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | need to clarify exact patch, see Debian comment on upstream bug |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | imagemagick | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | imagemagick | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | imagemagick | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | imagemagick | < any | UNKNOWN |
Related
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.001 Low
EPSS
Percentile
32.4%