5.5

CVE-2021-20243

EPSS 0.21%
Veröffentlicht 09.03.2021 18:15:15
Zuletzt bearbeitet 21.11.2024 05:46:12
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Imagemagick ≫ Imagemagick Version < 7.0.10-62

Debian ≫ Debian Linux Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.435

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-369 Divide By Zero

The product divides a value by zero.

https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

https://bugzilla.redhat.com/show_bug.cgi?id=1928958

Third Party Advisory

Issue Tracking

https://github.com/ImageMagick/ImageMagick/pull/3193

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-20243

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20243

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20243

EUVD