VDB

CVE-2020-27770

CVE-2020-27770 PUBLISHED CVSS 5.5 MEDIUM

Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.

EPSS 1.15% · 65.5th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
1.15%
65.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSimagemagick8:6.9.10.23+dfsg-2.1ubuntu8, 8:6.9.10.23+dfsg-2.1ubuntu9, 8:6.9.10.23+dfsg-2.1ubuntu10
Ubuntu:18.04:LTSimagemagick8:6.9.7.4+dfsg-16ubuntu6.9, *, 8:6.9.7.4+dfsg-16ubuntu2
Ubuntu:Pro:16.04:LTSimagemagick*, *, 8:6.8.9.9-7ubuntu5.16+esm1

Timeline

  • Dec 4, 2020 CVE Published
  • Dec 4, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 3, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 5, 2022 EPSS Score
  • Sep 9, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›