ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2021.0156
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2021-0156)
Resumen:	The remote host is missing an update for the 'abydos, blender, converseen, cuneiform-linux, digikam, imagemagick, kxstitch, libopenshot, mgba, pfstools, php-imagick, pythonmagick, sk1, spectacle, synfig, transcode, uniconvertor, windowmaker, xine-lib1.2, zbar' package(s) announced via the MGASA-2021-0156 advisory.
Descripción:	Summary: The remote host is missing an update for the 'abydos, blender, converseen, cuneiform-linux, digikam, imagemagick, kxstitch, libopenshot, mgba, pfstools, php-imagick, pythonmagick, sk1, spectacle, synfig, transcode, uniconvertor, windowmaker, xine-lib1.2, zbar' package(s) announced via the MGASA-2021-0156 advisory. Vulnerability Insight: A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20241). A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20243). A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20244). A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVe-2021-20246). Note that abydos, blender, converseen, cuneiform-linux, digikam, kxxstich, libopenshot, pfstools, php-imagick, spectacle, synfig, xine-lib1.2, mgba, windowmaker, zbar and transcode (and tainted conter-parts) have been rebuilt. Affected Software/OS: 'abydos, blender, converseen, cuneiform-linux, digikam, imagemagick, kxstitch, libopenshot, mgba, pfstools, php-imagick, pythonmagick, sk1, spectacle, synfig, transcode, uniconvertor, windowmaker, xine-lib1.2, zbar' package(s) on Mageia 7, Mageia 8. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-20241 https://bugzilla.redhat.com/show_bug.cgi?id=1928952 https://github.com/ImageMagick/ImageMagick/pull/3177 https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html Common Vulnerability Exposure (CVE) ID: CVE-2021-20243 https://bugzilla.redhat.com/show_bug.cgi?id=1928958 https://github.com/ImageMagick/ImageMagick/pull/3193 https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2021-20244 https://bugzilla.redhat.com/show_bug.cgi?id=1928959 https://github.com/ImageMagick/ImageMagick/pull/3194 Common Vulnerability Exposure (CVE) ID: CVE-2021-20246 https://bugzilla.redhat.com/show_bug.cgi?id=1928941
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.