deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27763
Published: 2020-12-03
Description: A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Score: 3.3 (LOW)
CWE: CWE-369, CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894682; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27764
Published: 2020-12-03
Description: In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894683; https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
CVE: CVE-2020-27778
Published: 2020-12-03
Description: A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824, CWE-824
References: https://bugzilla.redhat.com/show_bug.cgi?id=1900712; https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html; https://bugzilla.redhat.com/show_bug.cgi?id=1900712
CVE: CVE-2020-27783
Published: 2020-12-03
Description: A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://advisory.checkmarx.net/advisory/CX-2020-4286; https://bugzilla.redhat.com/show_bug.cgi?id=1901633; https://lists.debian.org/debian-lts-announce/2020/12/msg00028.html
CVE: CVE-2020-28251
Published: 2020-12-03
Description: NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must complete a straightforward password-cracking exercise.
CVSS Score: 8.1 (HIGH)
References: https://www.netscout.com/products; https://www.netscout.com/securityadvisories; https://www.netscout.com/products
CVE: CVE-2020-28923
Published: 2020-12-03
Description: An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
CVSS Score: 2.7 (LOW)
References: https://www.playframework.com/security/vulnerability; https://www.playframework.com/security/vulnerability/CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer; https://www.playframework.com/security/vulnerability
CVE: CVE-2020-13524
Published: 2020-12-03
Description: An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/kb/HT212011
CVE: CVE-2020-13525
Published: 2020-12-03
Description: The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126
CVE: CVE-2020-23726
Published: 2020-12-03
Description: There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD).
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/y5s5k5/CVE-2020-23726; https://github.com/y5s5k5/POCtemp1; https://www.wisecleaner.com.cn/
CVE: CVE-2020-23727
Published: 2020-12-03
Description: There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD).
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/y5s5k5/CVE-2020-23727; https://github.com/y5s5k5/POCtemp3; https://www.antiy.com
CVE: CVE-2020-28175
Published: 2020-12-03
Description: There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52. Attackers can use constructed programs to increase user privileges
CVSS Score: 7.8 (HIGH)
References: http://www.almico.com/speedfan.php; https://github.com/y5s5k5/CVE-2020-28175; https://github.com/y5s5k5/exp/blob/main/exp
CVE: CVE-2020-17527
Published: 2020-12-03
Description: While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.openwall.com/lists/oss-security/2020/12/03/3; https://lists.apache.org/thread.html/r26a2a66339087fc37db3caf201e446d3e83b5cce314371e235ff1784%40%3Ccommits.tomee.apache.org%3E; https://lists.apache.org/thread.html/r2d6e05c5ff96f8068a59dfdb3800e9ee8d4e36ce1971783c6e5f9b20%40%3Ccommits.tomee.apache.org%3E
CVE: CVE-2020-23736
Published: 2020-12-03
Description: There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer crashes (BSOD).
CVSS Score: 5.5 (MEDIUM)
References: http://www.dadajiasu.net; https://github.com/y5s5k5/CVE-2020-23736; https://github.com/y5s5k5/POCtemp5
CVE: CVE-2020-23738
Published: 2020-12-03
Description: There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD)
CVSS Score: 5.5 (MEDIUM)
References: http://www.advancedsystemcare.cn; https://github.com/y5s5k5/CVE-2020-23738; https://github.com/y5s5k5/POCtemp6
CVE: CVE-2020-23740
Published: 2020-12-03
Description: In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.drivergenius.com/; https://github.com/y5s5k5/CVE-2020-23740; https://github.com/y5s5k5/POCtemp8
CVE: CVE-2020-23741
Published: 2020-12-03
Description: In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD).
CVSS Score: 5.5 (MEDIUM)
References: http://www.amoisoft.com/; https://github.com/y5s5k5/CVE-2020-23741; https://github.com/y5s5k5/POCtemp9
CVE: CVE-2020-29529
Published: 2020-12-03
Description: HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of multiple symlinks. Fixed in 0.5.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-59
References: https://github.com/hashicorp/go-slug/compare/v0.4.3...v0.5.0; https://github.com/hashicorp/go-slug/pull/12; https://github.com/hashicorp/go-slug/releases/tag/v0.5.0
CVE: CVE-2020-29534
Published: 2020-12-03
Description: An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd(), aka CID-0f2122045b94.
CVSS Score: 7.8 (HIGH)
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=2089; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.3; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f2122045b946241a9e549c2a76cea54fa58a7ff
CVE: CVE-2018-21270
Published: 2020-12-03
Description: Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/mhart/StringStream/issues/7; https://hackerone.com/reports/321670; https://www.npmjs.com/advisories/664
CVE: CVE-2020-26248
Published: 2020-12-03
Description: In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/160539/PrestaShop-ProductComments-4.2.0-SQL-Injection.html; https://github.com/PrestaShop/productcomments/commit/7c2033dd811744e021da8897c80d6c301cd45ffa; https://github.com/PrestaShop/productcomments/releases/tag/v4.2.1
CVE: CVE-2020-16123
Published: 2020-12-04
Description: An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information. Fixed in 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://launchpad.net/bugs/1895928; https://ubuntu.com/USN-4640-1; https://launchpad.net/bugs/1895928
CVE: CVE-2020-27348
Published: 2020-12-04
Description: In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://bugs.launchpad.net/bugs/1901572; https://github.com/snapcore/snapcraft/pull/3345; https://usn.ubuntu.com/usn/usn-4661-1
CVE: CVE-2020-29561
Published: 2020-12-04
Description: An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://github.com/riscv-boom/riscv-boom/issues/504#issuecomment-736196635; https://github.com/riscv-boom/riscv-boom/issues/504#issuecomment-736196635
CVE: CVE-2020-28916
Published: 2020-12-04
Description: hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.openwall.com/lists/oss-security/2020/12/01/2; https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE: CVE-2020-29562
Published: 2020-12-04
Description: The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/; https://security.gentoo.org/glsa/202101-20
CVE: CVE-2020-29565
Published: 2020-12-04
Description: An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.openwall.com/lists/oss-security/2020/12/08/2; https://bugs.launchpad.net/horizon/+bug/1865026; https://review.opendev.org/c/openstack/horizon/+/758841/
CVE: CVE-2020-5675
Published: 2020-12-04
Description: Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier), GS21 model of GOT series (GS2110-WTBD V01.39.000 and earlier, GS2107-WTBD V01.39.000 and earlier, GS2110-WTBD-N V01.39.000 and earlier, and GS2107-WTBD-N V01.39.000 and earlier), and Tension Controller LE7-40GU-L series (LE7-40GU-L Screen package data for CC-Link IEF Basic V1.00, LE7-40GU-L Screen package data for MODBUS/TCP V1.00, and LE7-40GU-L Screen package data for SLMP V1.00) allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted packet. As a result, deterioration of communication performance or a denial-of-service (DoS) condition of the TCP communication functions of the products may occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://jvn.jp/vu/JVNVU99277775/index.html; https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-017.pdf; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-017_en.pdf
CVE: CVE-2020-27765
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-369, CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894684; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27766
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894686; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27767
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894687; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27770
Published: 2020-12-04
Description: Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894691; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27771
Published: 2020-12-04
Description: In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex() to ssize_t type to avoid this bug. This undefined behavior could be triggered when ImageMagick processes a crafted pdf file. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was demonstrated in this case. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898290; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27408
Published: 2020-12-04
Description: OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-640
References: https://github.com/OS4ED/openSIS-Responsive-Design/releases; https://insinuator.net/2020/10/opensis-vulnerabilities/; https://github.com/OS4ED/openSIS-Responsive-Design/releases
CVE: CVE-2020-27409
Published: 2020-12-04
Description: OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OS4ED/openSIS-Responsive-Design/commit/edca0855e7bc27d5b28dcb2d16f057ada865e282#diff-5f88e2ce4cd96451df[PII_REDACTED]b4b2; https://github.com/OS4ED/openSIS-Responsive-Design/compare/ver7.4...V7.5; https://insinuator.net/2020/10/opensis-vulnerabilities/
CVE: CVE-2020-25461
Published: 2020-12-04
Description: Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).
CVSS Score: 7.5 (HIGH)
References: https://github.com/Moddable-OpenSource/moddable/issues/441; https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908; https://github.com/Moddable-OpenSource/moddable/issues/441
CVE: CVE-2020-25462
Published: 2020-12-04
Description: Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/432; https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200903; https://github.com/Moddable-OpenSource/moddable/issues/432
CVE: CVE-2020-25463
Published: 2020-12-04
Description: Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).
CVSS Score: 7.5 (HIGH)
References: https://github.com/Moddable-OpenSource/moddable/issues/440; https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908; https://github.com/Moddable-OpenSource/moddable/issues/440
CVE: CVE-2020-25464
Published: 2020-12-04
Description: Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/431; https://github.com/Moddable-OpenSource/moddable/issues/431
CVE: CVE-2020-25465
Published: 2020-12-04
Description: Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/Moddable-OpenSource/moddable/issues/442; https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908; https://github.com/Moddable-OpenSource/moddable/issues/442
CVE: CVE-2020-25449
Published: 2020-12-04
Description: Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://itsmeanonartist.tech/blogs/blog2.html; https://packetstormsecurity.com/files/159070/Cabot-0.11.12-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/48791
CVE: CVE-2020-27774
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898296; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27775
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898300; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27776
Published: 2020-12-04
Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1898304; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html; https://bugzilla.redhat.com/show_bug.cgi?id=1898304