Integer overflow in ImageMagick - CVE-2021-20312

Vulnerability identifier: #VU62867

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-20312

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in the WriteTHUMBNAILImage() function in coders/thumbnail.c. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

ImageMagick
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE CaaS Platform
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
Ubuntu
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Desktop Applications
libimage-magick-perl (Ubuntu package)
libmagickwand-dev (Ubuntu package)
imagemagick-6.q16 (Ubuntu package)
libimage-magick-q16-perl (Ubuntu package)
libmagickcore-6-headers (Ubuntu package)
imagemagick-6-common (Ubuntu package)
libmagickwand-6.q16-6 (Ubuntu package)
libmagick++-6.q16hdri-dev (Ubuntu package)
libmagick++-dev (Ubuntu package)
perlmagick (Ubuntu package)
imagemagick (Ubuntu package)
libmagickwand-6.q16-dev (Ubuntu package)
libmagickcore-6.q16-6 (Ubuntu package)
libmagickcore-6.q16-2 (Ubuntu package)
libmagickcore-6-arch-config (Ubuntu package)
libmagickcore-6.q16-dev (Ubuntu package)
libmagickcore-dev (Ubuntu package)
imagemagick-common (Ubuntu package)
libmagick++-6.q16-dev (Ubuntu package)
libmagickcore-6.q16-2-extra (Ubuntu package)
libmagick++-6.q16-5v5 (Ubuntu package)
libmagick++-6.q16hdri-8 (Ubuntu package)
libmagickwand-6.q16-2 (Ubuntu package)
libmagickcore5 (Ubuntu package)
libmagickwand5 (Ubuntu package)
libmagickcore5-extra (Ubuntu package)
libmagick++5 (Ubuntu package)
libmagick++-6.q16-8 (Ubuntu package)
libmagickcore-6.q16hdri-6 (Ubuntu package)
imagemagick-6.q16hdri (Ubuntu package)
libmagick++-6.q16hdri-7 (Ubuntu package)
libmagickwand-6.q16-3 (Ubuntu package)
libmagickcore-6.q16-3 (Ubuntu package)
libmagick++-6.q16-7 (Ubuntu package)
libmagickcore-6.q16hdri-3 (Ubuntu package)
libMagick++-6_Q16-3
libMagickWand-6_Q16-1-debuginfo
libMagickWand-6_Q16-1
libMagickCore-6_Q16-1-debuginfo
libMagickCore-6_Q16-1
perl-PerlMagick-debuginfo
perl-PerlMagick
libMagick++-devel
ImageMagick-devel
ImageMagick-config-6-SUSE
libMagickCore-6_Q16-1-debuginfo-32bit
ImageMagick
ImageMagick-debuginfo
ImageMagick-debugsource
ImageMagick-config-6-upstream
libMagick++-6_Q16-3-debuginfo
libMagickCore-6_Q16-1-32bit
libmagickcore-6.q16-3-extra (Ubuntu package)
libmagickcore-6.q16-6-extra (Ubuntu package)
libMagickWand-7_Q16HDRI6
libMagickWand-7_Q16HDRI6-debuginfo
ImageMagick-config-7-SUSE
ImageMagick-config-7-upstream
libMagick++-7_Q16HDRI4
libMagick++-7_Q16HDRI4-debuginfo
libMagickCore-7_Q16HDRI6
libMagickCore-7_Q16HDRI6-debuginfo
cflinuxfs3

Install updates from vendor's website.

ImageMagick - update to 7.0.11-0
libimage-magick-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6.q16 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libimage-magick-q16-perl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6-headers (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6-common (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16hdri-dev (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
perlmagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore-6-arch-config (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1
libmagickcore-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5
libmagickcore-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-common (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16-dev (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16-2-extra (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagick++-6.q16-5v5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8:6.8.9.97ubuntu5.16+esm2
libmagick++-6.q16hdri-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickwand-6.q16-2 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickwand5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagickcore5-extra (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libmagick++5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 6.7.7.10-6ubuntu3
libmagick++-6.q16-8 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagickcore-6.q16hdri-6 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
imagemagick-6.q16hdri (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14, 8:6.9.10.23+dfsg-2.1ubuntu11.9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1, 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.5, 8:6.9.11.60+dfsg-1.6ubuntu0.23.04.1
libmagick++-6.q16hdri-7 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickwand-6.q16-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickcore-6.q16-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagick++-6.q16-7 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.12, 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickcore-6.q16hdri-3 (Ubuntu package) - addressed in versions Ubuntu Pro, 8:6.9.7.4+dfsg-16ubuntu6.14
cflinuxfs3 - update to 0.339.0
libMagick++-6_Q16-3 - update to 6.8.8.1-71.165.1
libMagickWand-6_Q16-1-debuginfo - update to 6.8.8.1-71.165.1
libMagickWand-6_Q16-1 - update to 6.8.8.1-71.165.1
libMagickCore-6_Q16-1-debuginfo - update to 6.8.8.1-71.165.1
libMagickCore-6_Q16-1 - update to 6.8.8.1-71.165.1
perl-PerlMagick-debuginfo - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
perl-PerlMagick - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagick++-devel - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-devel - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-config-6-SUSE - update to 6.8.8.1-71.165.1
libMagickCore-6_Q16-1-debuginfo-32bit - update to 6.8.8.1-71.165.1
ImageMagick - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-debuginfo - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-debugsource - addressed in versions 6.8.8.1-71.165.1, 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-config-6-upstream - update to 6.8.8.1-71.165.1
libMagick++-6_Q16-3-debuginfo - update to 6.8.8.1-71.165.1
libMagickCore-6_Q16-1-32bit - update to 6.8.8.1-71.165.1
libmagickcore-6.q16-3-extra (Ubuntu package) - update to 8:6.9.7.4+dfsg-16ubuntu6.14
libmagickcore-6.q16-6-extra (Ubuntu package) - update to 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1
libMagickWand-7_Q16HDRI6 - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagickWand-7_Q16HDRI6-debuginfo - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-config-7-SUSE - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
ImageMagick-config-7-upstream - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagick++-7_Q16HDRI4 - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagick++-7_Q16HDRI4-debuginfo - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagickCore-7_Q16HDRI6 - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1
libMagickCore-7_Q16HDRI6-debuginfo - addressed in versions 7.0.7.34-10.15.1, 7.0.7.34-150000.3.123.1

• https://bugzilla.redhat.com/show_bug.cgi?id=1946742
• https://github.com/ImageMagick/ImageMagick/commit/70aa86f5d5d8aa605a918ed51f7574f433a18482

• SUSE update for ImageMagick
• SUSE update for ImageMagick
• Ubuntu update for imagemagick
• Ubuntu update for imagemagick
• Cloud Foundry Foundation cflinuxfs3 update for ImageMagick
• Ubuntu update for imagemagick
• SUSE update for ImageMagick