CVE Vulnerabilities

CVE-2020-27760

Divide By Zero

Published: Dec 03, 2020 | Modified: Mar 11, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.5 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
LOW

In GammaImage() of /MagickCore/enhance.c, depending on the gamma value, its possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the PerceptibleReciprocal() to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Imagemagick Imagemagick * 6.9.10-68 (excluding)
Imagemagick Imagemagick 7.0.0-0 (including) 7.0.8-68 (excluding)
Imagemagick Ubuntu bionic *
Imagemagick Ubuntu esm-infra/xenial *
Imagemagick Ubuntu focal *
Imagemagick Ubuntu groovy *
Imagemagick Ubuntu trusty *
Imagemagick Ubuntu trusty/esm *
Imagemagick Ubuntu upstream *
Imagemagick Ubuntu xenial *

References