CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

History

22 May 2023, 02:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html -
CWE CWE-369

01 Jan 2022, 18:02

Type Values Removed Values Added
First Time Debian
Debian debian Linux
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - Mailing List, Third Party Advisory
CPE cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

03 Jun 2021, 08:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html -

18 Mar 2021, 13:22

Type Values Removed Values Added
References (MISC) https://github.com/ImageMagick/ImageMagick/issues/3176 - (MISC) https://github.com/ImageMagick/ImageMagick/issues/3176 - Issue Tracking, Patch, Third Party Advisory
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1928943 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1928943 - Issue Tracking, Patch, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 7.1
v3 : 5.5
CPE cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

09 Mar 2021, 19:55

Type Values Removed Values Added
New CVE

Information

Published : 2021-03-09 19:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-20245

Mitre link : CVE-2021-20245

CVE.ORG link : CVE-2021-20245


JSON object : View

Products Affected

fedoraproject

  • fedora

debian

  • debian_linux

redhat

  • enterprise_linux

imagemagick

  • imagemagick
CWE
CWE-369

Divide By Zero