USN-5158-1: imagemagick Ubuntu

CVSS: UnknownPublished
Published 29-11-2021Last modified 29-06-2026
Open JSON

Vulnerability summary

USN-5158-1 is a vulnerability in imagemagick Ubuntu with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2021-20244CVE-2021-20246CVE-2021-20309CVE-2021-20312CVE-2021-20313

Timeline

  1. 29-11-2021
    PublishedVulnerability first disclosed.
  2. 29-06-2026
    Last modifiedVulnerability information updated.

Description

imagemagick vulnerabilities It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. (CVE-2021-20244) It was discovered that ImageMagick incorrectly handled certain values when performing resampling operations. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. (CVE-2021-20246) It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service (CVE-2021-20309) It was discovered that ImageMagick incorrectly handled certain values when processing thumbnail image data. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. (CVE-2021-20312) It was discovered that ImageMagick incorrectly handled memory cleanup when performing certain cryptographic operations. Under certain conditions sensitive cryptographic information could be disclosed. (CVE-2021-20313)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu1 product
  • imagemagick< 8:6.7.7.10-6ubuntu3.13+esm1 | < 8:6.8.9.9-7ubuntu5.16+esm1 | < 8:6.9.7.4+dfsg-16ubuntu6.12

1 vendor · 1 product

References

6 links