A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1928952 | Issue Tracking Third Party Advisory |
| https://github.com/ImageMagick/ImageMagick/pull/3177 | Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html |
Configurations
History
22 May 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References |
|
25 Mar 2021, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
24 Mar 2021, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 Mar 2021, 20:25
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.5 |
| CPE | cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/ImageMagick/ImageMagick/pull/3177 - Patch, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1928952 - Issue Tracking, Third Party Advisory |
09 Mar 2021, 18:39
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-03-09 18:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-20241
Mitre link : CVE-2021-20241
CVE.ORG link : CVE-2021-20241
JSON object : View
Products Affected
debian
- debian_linux
imagemagick
- imagemagick
CWE
CWE-369
Divide By Zero