CVE-2020-27560: Divide by Zero
ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u4Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u2Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:7.1.1.43+dfsg1-1Fixed in 8:7.1.1.47+dfsg1-1 - Upgrade
Upgrade
alpine/imagemagickto a version that resolves this vulnerability.Fixed in 7.0.10.35-r0 - Upgrade
Upgrade
alpine/imagemagick6to a version that resolves this vulnerability.Fixed in 6.9.11.35-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27560?
The severity of CVE-2020-27560 is medium with a severity value of 3.3.
How does CVE-2020-27560 affect ImageMagick?
CVE-2020-27560 affects ImageMagick version 7.0.10-34, potentially causing a denial of service.
How does CVE-2020-27560 impact Debian Debian Linux?
CVE-2020-27560 impacts Debian Debian Linux version 9.0.
How does CVE-2020-27560 impact openSUSE Leap?
CVE-2020-27560 impacts openSUSE Leap version 15.2.
Is there a fix available for CVE-2020-27560?
Yes, a fix is available. Please refer to the provided references for more information.