USN-5335-1

Dashboard / Vulnerabilities / USN-5335-1

USN-5335-1

Summary: imagemagick vulnerabilities

Details: It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or large images. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. (CVE-2020-19667, CVE-2017-13144) Suhwan Song discovered that ImageMagick incorrectly handled memory when processing PNG,PALM,MIFF image data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. (CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753) Suhwan Song discovered that ImageMagick incorrectly handled certain values when processing image data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. (CVE-2020-25676, CVE-2020-27750, CVE-2020-27760, CVE-2020-27762, CVE-2020-27766, CVE-2020-27770) Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values when processing image data. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. (CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)

References: https://ubuntu.com/security/notices/USN-5335-1, https://ubuntu.com/security/CVE-2017-13144, https://ubuntu.com/security/CVE-2020-19667, https://ubuntu.com/security/CVE-2020-25664, https://ubuntu.com/security/CVE-2020-25665, https://ubuntu.com/security/CVE-2020-25674, https://ubuntu.com/security/CVE-2020-25676, https://ubuntu.com/security/CVE-2020-27750, https://ubuntu.com/security/CVE-2020-27753, https://ubuntu.com/security/CVE-2020-27760, https://ubuntu.com/security/CVE-2020-27762, https://ubuntu.com/security/CVE-2020-27766, https://ubuntu.com/security/CVE-2020-27770, https://ubuntu.com/security/CVE-2021-20176, https://ubuntu.com/security/CVE-2021-20241, https://ubuntu.com/security/CVE-2021-20243