CVE-2021-4219: Input Validation
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system.
Other sources
In order to successfully exploit this vulnerability, the attacker needs to submit a specially crafted SVG to the ImageMagick to let ImageMagick hang forever from reading a file descriptor. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SVG file.
Reference:
https://github.com/ImageMagick/ImageMagick/issues/4626
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-4219?
CVE-2021-4219 is a vulnerability found in ImageMagick that allows an attacker to crash the system by exploiting improper use of open functions.
How severe is CVE-2021-4219?
CVE-2021-4219 has a severity rating of 5.5 (medium).
Which software versions are affected by CVE-2021-4219?
CVE-2021-4219 affects ImageMagick versions 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+ and 8:6.9.11.60+dfsg-1.3ubuntu1.
How can I fix CVE-2021-4219?
To fix CVE-2021-4219, update ImageMagick to version 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+ or 8:6.9.11.60+dfsg-1.3ubuntu1.