DjVu: Multiple vulnerabilities

🗓️ 27 Jul 2020 00:00:00Reported by Gentoo FoundationType

Multiple vulnerabilities discovered in DjVu, a web-centric document and image platform. Upgrade to version ">=app-text/djvu-3.5.27-r2

Reporter	Title	Published	Views	Family All 116
ATTACKERKB	CVE-2019-15142: DjVuLibre Out-of-Bound Read Vulnerability	13 Feb 202000:00	–	attackerkb
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVU files by DjVuLibre allows a hacker to cause a service failure by exploiting the issue related to buffer overflows.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files, related to an uncontrolled recursion, allows a hacker to cause service failures.	2 Nov 202100:00	–	bdu_fstec
Cloud Foundry	USN-4198-1: DjVuLibre vulnerabilities \| Cloud Foundry	5 Dec 201900:00	–	cloudfoundry