Lucene search
PRIOn knowledge basePRION:CVE-2018-17407HistorySep 23, 2018 - 9:29 p.m.
Buffer overflow
2018-09-2321:29:00
PRIOn knowledge base
www.prio-n.com
2
0.002 Low
EPSS
Percentile
61.4%
An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| tex_live | eq | < 2018921 |
Related
cve
cve
CVE-2018-17407
2018-09-23 21:29:00
openvas
openvas
Debian: Security Advisory (DSA-4299-1)
2018-09-20 00:00:00
Debian: Security Advisory (DLA-1514-1)
2018-09-23 00:00:00
Huawei EulerOS: Security Advisory for texlive (EulerOS-SA-2020-2567)
2020-12-15 00:00:00
nessus
nessus
openSUSE Security Update : texlive (openSUSE-2019-800)
2019-03-27 00:00:00
SUSE SLED15 / SLES15 Security Update : texlive (SUSE-SU-2018:3122-1)
2019-01-02 00:00:00
Fedora 29 : 7:texlive-base / 8:texlive (2018-1959097dfc)
2019-01-03 00:00:00
archlinux
archlinux
[ASA-201812-4] texlive-bin: arbitrary code execution
2018-12-08 00:00:00
ubuntucve
ubuntucve
CVE-2018-17407
2018-09-23 00:00:00
mageia
mageia
Updated texlive packages fix security vulnerability
2018-10-14 03:58:33
nvd
nvd
CVE-2018-17407
2018-09-23 21:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: texlive-2018-20.fc29
2018-10-09 00:08:19
[SECURITY] Fedora 29 Update: texlive-base-20180414-24.fc29
2018-10-09 00:08:19
debiancve
debiancve
CVE-2018-17407
2018-09-23 21:29:00
ubuntu
ubuntu
Tex Live-bin vulnerability
2018-10-23 00:00:00
Tex Live vulnerabilities
2018-10-11 00:00:00
oraclelinux
oraclelinux
texlive security update
2020-04-06 00:00:00
amazon
amazon
Medium: texlive
2020-06-23 06:44:00
Medium: texlive
2020-07-14 02:48:00
redhatcve
redhatcve
CVE-2018-17407
2018-09-25 15:23:06
osv
osv
texlive-bin - security update
2018-09-22 00:00:00
texlive-bin - security update
2018-09-21 00:00:00
CVE-2018-17407
2018-09-23 21:29:00
redhat
redhat
(RHSA-2020:1036) Moderate: texlive security update
2020-03-31 09:11:10
suse
suse
Security update for texlive (important)
2018-10-18 00:10:47
Security update for texlive (important)
2018-10-04 15:11:03
cvelist
cvelist
CVE-2018-17407
2018-09-23 21:00:00
centos
centos
texlive security update
2020-04-08 20:02:29
veracode
veracode
Arbitrary Code Execution
2020-04-01 00:37:56