CVE-2021-20313 PUBLISHED

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.

EPSS 0.24% · 47.3th percentile

Risk Scores

EPSS Score
0.24%
47.3th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSimagemagick0, 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.10.23+dfsg-2.1ubuntu11
Ubuntu:Pro:22.04:LTSimagemagick8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1, 8:6.9.11.60+dfsg-1.3build2, 8:6.9.11.60+dfsg-1.3build1
Ubuntu:Pro:14.04:LTSimagemagick8:6.7.7.10-5ubuntu4, 8:6.7.7.10-6ubuntu1, 8:6.7.7.10-6ubuntu2
Ubuntu:Pro:16.04:LTSimagemagick*, *, *
Ubuntu:18.04:LTSimagemagick0, 8:6.9.7.4+dfsg-16ubuntu2, 8:6.9.7.4+dfsg-16ubuntu4

Timeline

References

Open in Interactive Console →