Ubuntu.comUB:CVE-2021-20245CVE-2021-20245
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
30.8%
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a
crafted file that is processed by ImageMagick could trigger undefined
behavior in the form of math division by zero. The highest threat from this
vulnerability is to system availability.
Bugs
Notes
| Author | Note |
|---|---|
| rayveldkamp | imagemagick is in universe from focal onwards |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 22.04 | noarch | imagemagick | < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1 | UNKNOWN |
| ubuntu | 22.10 | noarch | imagemagick | < 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | imagemagick | < 8:6.9.11.60+dfsg-1.3ubuntu1 | UNKNOWN |
| ubuntu | 23.10 | noarch | imagemagick | < 8:6.9.11.60+dfsg-1.3ubuntu1 | UNKNOWN |
| ubuntu | 24.04 | noarch | imagemagick | < 8:6.9.11.60+dfsg-1.3ubuntu1 | UNKNOWN |
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
30.8%