Updated djvulibre packages fix security vulnerabilities

🗓️ 30 Nov 2019 13:06:06Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 36 Views

Updated djvulibre packages fix security vulnerabilitie

Reporter	Title	Published	Views	Family All 160
ATTACKERKB	CVE-2019-15142: DjVuLibre Out-of-Bound Read Vulnerability	13 Feb 202000:00	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in DjVuLibre	3 May 202623:59	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в djvulibre	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the DJVU::filter_fv function at IW44EncodeCodec.cpp in the DjVuLibre library and utilities set allows a hacker to trigger a service failure.	29 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DJVU reading component in the viewing, creation, and editing of DjVU files by DjVuLibre allows a hacker to cause a service failure by exploiting the issue related to buffer overflows.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.	2 Nov 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	any	djvulibre	3.5.27-5.1	djvulibre-3.5.27-5.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
usn	www.usn.ubuntu.com/4198-1/

30 Nov 2019 13:06Current

3.8Low risk

Vulners AI Score3.8

CVSS 25

CVSS 3.17.5

EPSS0.04581

djvulibre security vulnerabilities djvulibre 3.5.27 denial-of-service heap-based buffer gbitmap resource exhaustion sorting functionality uncontrolled recursion pbm image file jb2 image file null pointer dereference unix