CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2021-20244

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Score
5.5 medium
Published
2021-03-09
Links
NVD · cve.org

Affected ports (2)

PortPackageVersionStatusMaintainer
graphics/ImageMagick6ImageMagick66.9.13.50_1,1unaddresseddesktop@FreeBSD.org
graphics/ImageMagick6ImageMagick6-nox116.9.13.50_1,1unaddresseddesktop@FreeBSD.org

VuXML

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>ImageMagick6</name>
	<range><lt>7.0.10-62</lt></range>
      </package>
      <package>
	<name>ImageMagick6-nox11</name>
	<range><lt>7.0.10-62</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A flaw was found in ImageMagick in MagickCore/visual-effects.c. An
	attacker who submits a crafted file that is processed by ImageMagick
	could trigger undefined behavior in the form of math division by zero.
	The highest threat from this vulnerability is to system availability.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2021-20244</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2021-20244</url>
    </references>
    <dates>
      <discovery>2021-03-09</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>