CVE-2020-27760: 
ImageMagick vulnerability analysis and mitigation

CVE-2020-27760 affects ImageMagick versions prior to 7.0.8-68. The vulnerability exists in the GammaImage() function of /MagickCore/enhance.c, where depending on the gamma value, it's possible to trigger a divide-by-zero condition when processing a crafted input file (Red Hat Bugzilla).

The vulnerability is classified as a divide-by-zero issue in the GammaImage() function within MagickCore/enhance.c. The flaw received a CVSS v3.1 Base Score of 5.5 (MEDIUM) with vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The issue was addressed by implementing the PerceptibleReciprocal() function to prevent the divide-by-zero condition from occurring (NVD).

When exploited, this vulnerability could lead to an impact on application availability through a denial of service condition when processing specially crafted image files (Red Hat Bugzilla).

The vulnerability requires a user or automated system to process a specially crafted image file. The attack requires local access and user interaction to exploit (NVD).

The vulnerability was fixed in ImageMagick version 7.0.8-68. Users should upgrade to this version or later. Various Linux distributions have also released security updates to address this vulnerability, including Debian and Ubuntu (Debian LTS, Ubuntu Security).