FreshPorts - VuXML
This page displays vulnerability information about FreeBSD Ports.
The VUXML data was last processed by FreshPorts on 2024-11-27 06:34:59 UTC
List all Vulnerabilities, by package
List all Vulnerabilities, by date
k68
These are the vulnerabilities relating to the commit you have selected:
VuXML ID | Description |
a7c60af1-b3f1-11eb-a5f7-a0f3c100ae18 | ImageMagick7 -- multiple vulnerabilities
CVE reports:
Several vulnerabilities have been discovered in ImageMagick:
- CVE-2021-20313: A flaw was found in ImageMagick in versions before 7.0.11.
A potential cipher leak when the calculate signatures in TransformSignature is possible.
- CVE-2021-20312: A flaw was found in ImageMagick in versions 7.0.11,
where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger
undefined behavior via a crafted image file that is submitted by an attacker and
processed by an application using ImageMagick.
- CVE-2021-20311: A flaw was found in ImageMagick in versions before 7.0.11,
where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c
may trigger undefined behavior via a crafted image file that is submitted by an
attacker processed by an application using ImageMagick.
- CVE-2021-20310: A flaw was found in ImageMagick in versions before 7.0.11,
where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger
undefined behavior via a crafted image file that is submitted by an attacker
and processed by an application using ImageMagick.
- CVE-2021-20309: A flaw was found in ImageMagick in versions before 7.0.11,
where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger
undefined behavior via a crafted image file submitted to an application using ImageMagick.
- And several othersâ¦
Discovery 2020-10-27 Entry 2021-05-13 ImageMagick7
ImageMagick7-nox11
< 7.0.11.12
CVE-2020-27829
CVE-2020-29599
CVE-2021-20176
CVE-2021-20241
CVE-2021-20243
CVE-2021-20244
CVE-2021-20245
CVE-2021-20246
CVE-2021-20309
CVE-2021-20310
CVE-2021-20311
CVE-2021-20312
CVE-2021-20313
|